Looks like ShellShock will be around for a while. We did some work in our labs to show how systems can be compromised easily and this is documented at the blog post below.
Detecting CVE-2014-6271 Bash Vulnerability ShellShock Attempts
The blog also has a link to a video which shows how exploit attempts can be detected on your network.
Is ShellShock of concern to you and do you use any tools\applications to check for activity?
Darragh
