Not much damage, who saw that coming? With all the warning flying around I was sure today was the end of the world. Of course all the warnings could have resulted in the lack of damage, but I doubt it. I think this entire threat was overblown, but so do lots of people. The interesting part is what this tells us about threat reporting.

I believe that CME-24 wouldn't have had this much hype if it wasn't because they found that web counter indicating the number of infections. Suddenly we had a decent threat monitor that didn't involve best guesses made from AV client reports, and people went mad. This worm didn't seem to provide any new infection vectors or any other particularly scary distribution tactics. Its destructive nature upped the 'impact' part of the risk equation, and the web counter let us measure the threat part better. It seems having an accurate measure is the same as multiplying what the 'best guess' threat level would be by 100%. The counter implication is that the threat level for other threats is usually a 'best guess'.

So what CME-24 showed me is that we need better threat reporting, as indicated by the overestimation that resulted when we had it.