Switchfast Blog - The Future of IT
Microsoft Investigates Internet Explorer Flaw - Again
Tuesday, January 26, 2010 by Michael Holley
Shortly after patching up a security issue in IE that allowed
Chinese hackers to gain data on employees, specifically human
rights activists, a new set of flaws has emerged that could be just
as serious as the previous ones.
Discovered by Core
Security Technologies, a Boston-based security company, the
security threat allows hackers to exploit and remotely access data
from a personal computer. A consultant explains
that none of the vulnerabilities are serious enough to compromise a
personal machine on their own but the combination of exploits can
result in an all-access pass to hackers for hundreds of millions of
PCs.
According to
Ars Technica, "Microsoft is investigating a responsibly
disclosed vulnerability in Internet Explorer. We're currently
unaware of any attacks trying to use the vulnerability or of
customer impact, and believe customers are at reduced risk due to
responsible disclosure."
Once Microsoft goes to work - again - to fix this problem, a
security update on Patch Tuesday should come, or even an
out-of-cycle update like a previous response to an IE
flaw.
Of course, if you haven't heard already, Microsoft is advising
their users to upgrade to IE 8, where they can enable Automatic
Updates as well as avoid the fate of previous generations of
IE.
On February 2nd, Core will demonstrate the IE
vulnerabilities at the Black
Hat security conference in Washington. For more information,
hit the links in the article.
Until Next Time -
Matt Hymel
Switchfast Technologies
Chicago IT Support
& Consulting
Rochester
IT Support & Consulting
Leave comment:
|