At around 12:00 AM EST (05:00 UTC) on Saturday, we detected an upsurge in UDP traffic from source port 4000. This traffic is caused by a new worm ("Witty") which exploits a vulnerability in BlackIce's ICQ parser. Later today, variations of the worm apparently used source ports other then port 4000. However, it is not clear if this is a new variant or a side effect caused by NAT.
Given that this worm generates large amounts of traffic, and the wide spread use of BlackIce, we will keep the InfoCon level at 'YELLOW', likely until Monday morning.
Meet the drop-resistant Moto Z2 Force
The Moto Z2 Force is really thin, with a fast processor and great battery life. It can survive drops without shattering.