Internet Explorer hit by critical flaw

By

Microsoft is warning users about an unpatched vulnerability within Internet Explorer. The warning arrives after research company SEC Consult published a demonstration how hackers could use the vulnerability to implant malware.

Microsoft said it was investigating the flaw and suggested a patch may soon be available.


"At the completion of this investigation, Microsoft will take the appropriate action to help protect our customers, which may include providing additional mitigation guidance through this Security Advisory," said the company in a statement.

Most existing versions of Internet Explorer are vulnerable to the exploit and Microsoft has advised users to change security settings in the Internet security zone to high, which sends prompts before running ActiveX controls.

"We have not been made aware of any attacks attempting to use the reported vulnerability or customer impact at this time, but we are aggressively investigating the public report," Microsoft said.

Last week, The U.S. Computer Emergency Readiness Team (US-CERT) issued an alert about a flaw in a Veritas Software data backup product, which it says was being actively exploited.

www.microsoft.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Qantas facing 'significant' data theft after cyber attack

Qantas facing 'significant' data theft after cyber attack

Home Affairs officer accessed data on "friends and associates"

Home Affairs officer accessed data on "friends and associates"

Qantas contacted by "potential cyber criminal"

Qantas contacted by "potential cyber criminal"

SA Power Networks tackles IAM, cloud security under five-year strategy

SA Power Networks tackles IAM, cloud security under five-year strategy

Log In

  |  Forgot your password?