Updating attack indicators