Great news. At 2PM today Microsoft will officially release its patch for the latest WMF exploit, which is nice of them to do ahead of time. It’s already available here:

http://www.microsoft.com/technet/security/Bulletin/ms06-001.mspx

Microsoft will hold a special Web cast on Friday, January 6, 2006, to provide technical details on the MS06-001 and to answer questions. Registration details will be available at http://www.microsoft.com/technet/security/default.mspx.

We’re actually reviewing deployment details now, as well as moving further ahead with the other preventive/detective measures already underway.

Incidentally, 4PM (-8 GMT) is the anticipated Sober explosion, but I’ve watched an incredibly exponential spike (2000%) in sober payload since Dec 28th, suggesting that the two issues may be closely related…all the more reason to get things under control right now.