Microsoft rushes out critical IE patch

 

Too late to protect Google.

Microsoft will release a patch tomorrow to fix a vulnerability in Internet Explorer that was apparently exploited by cyber criminals to hack into Google's Chinese office.

The software giant advised customers that update MS10-002 should be available from about 5am AEDT on Friday.

"[The patch] addresses the vulnerability related to recent attacks against Google and small subset of corporations, as well as several other vulnerabilities. Once applied, customers are protected against the known attacks that have been widely publicised," the company said in a statement.

Microsoft has been under pressure to fix the well publicised problem, which has caused many companies and governments to consider ditching Internet Explorer for an alternative browser such as Firefox or Google's Chrome.

Redmond warned customers to stick with IE because switching to another browser will create a 'false sense of security'.

"It is important to note that all software has vulnerabilities and switching browsers in an attempt to protect against this one, highly publicised, but currently limited attack can inadvertently create some false sense of security.  

"Microsoft is only seeing a very limited number of targeted attacks against a small subset of corporations and the attacks that we have seen to date are only effective against Internet Explorer 6. We are not seeing any widespread attacks and thus far we are not seeing attacks focused on consumers," the statement concluded.


Microsoft rushes out critical IE patch
"I can sympathize with the security researcher, it must feel like doing work for free. Shouldn't the software manufacturers pay them for this work? Maybe they should have a look at this? I don't ..."
By funkyg
 
 
 
Comments: 3
Mark D
Jan 22, 2010 11:10 AM
What a load of hype this turned into.
Ace
Jan 22, 2010 11:39 AM
I recommend ditching IE and using alternatiff[sic] browsers :D
funkyg
Jan 23, 2010 2:39 PM
I can sympathize with the security researcher, it must feel like doing work for free. Shouldn't the software manufacturers pay them for this work? Maybe they should have a look at this?

I don't however agree with releasing info before telling the manufacturers. Seems to me that all that would do is give hackers a few weeks to infect everyones computers before the manufacturers can respond. If they have already told manufacturers and they haven't done anything.....hmmm!
Comments have been disabled for this article.
 
 
 
Top Stories
Windows 8: Under the hood
Part One of iTnews' enterprise guide to Windows 8.
 
iTnews on tour: The Executive Summit Series
Join us in Sydney and Melbourne to meet Australia's tech leaders.
 
Meet Westpac's new technology leaders
Engineering realigned under CTO.
 
Sign up to receive iTnews email bulletins
   FOLLOW US...

Latest VideosSee all videos »

Latest Comments
Polls
Was your 2012 IT budget...




   |   View results
Cut by less than ten percent?
  15%
 
Cut by more than ten percent?
  34%
 
Flat
  27%
 
Increased by less than ten percent?
  7%
 
Increased by more than ten percent?
  16%
TOTAL VOTES: 409

Vote
Will you still use DropBox and other cloud storage in the wake of the Megauploads saga?

   |   View results
Yes
  65%
 
No
  35%
TOTAL VOTES: 303

Vote