Internet Explorer

(get it in RSS or Atom)

Internet Explorer zero-day exploit found on more websites. Fingers point towards Elderwood Project

Internet Explorer zero-day exploit found on more websites. Fingers point towards Elderwood Project

SophosLabs, has uncovered two new sites which have been hit by the recently discovered Internet Explorer zero-day vulnerability - a community seeking independence from China, and an Iranian oil firm's website.

Turkish Certificate Authority screwup leads to attempted Google impersonation

shutterstock_brokenpadlock250

Another Certificate Authority has been caught out having issued certificates that were being used to impersonate Google. Does the SSL padlock not mean we are safe anymore?

Zero day vulnerability in Internet Explorer being used in targeted attacks, FixIt now available

Microsoft releases fix for Internet Explorer security hole, full patch coming Friday

Microsoft has released an advisory on a new zero day attack against users of Internet Explorer. While a Fixit is available it may be best to avoid using IE for awhile.

Internet Explorer flaw allows attackers to track your mouse movements

Internet Explorer flaw allows attackers to track your mouse movements

An Internet Explorer vulnerability allows hackers to track mouse cursor movement anywhere on the screen, even if a given window is inactive, unfocused or minimised. It can also compromise the security of virtual keyboards and keypads, thereby thwarting their use against keyloggers.

Microsoft pushes IE 9 tweak via Windows Update to close three critical security holes

Microsoft pushes IE 9 tweak via Windows Update to close three critical security holes

Microsoft has reminded Internet Explorer users of the importance of keeping their browser updated against security threats.

SSCC 99 - Hurricane Sandy, DMCA, do not track, Barnes and Noble and Facebook

Sophos Security Chet Chat

Michael Argast rejoined Chet this halloween to catch up on the week's news including new DMCA exceptions, Hurricane Sandy scams, Yahoo! ignoring do not track, Barnes and Noble credit cards skimming and Facebook's donation to spam research.

Yahoo! rejects privacy arguments, ignores do not track from IE 10 users

Yahoo! rejects privacy arguments, ignores do not track from IE 10 users

Yahoo! has decided to ignore Internet Explorer 10 users privacy choices. Are IE 10 users losing out on a tailored advertising experience?

Windows 8 security overview - Safest Windows ever?

Windows 8 security overview - Safest Windows ever?

Windows 8 is now available and Microsoft is touting the entirely new user interface and app store. What security enhancements were made over Windows 7 and are these changes reason enough to upgrade?

Blackhole malware attack spread via 'Your photos' email

blackhole-thumb

A malware attack has been spammed out widely via email to internet users, posing as a message about photos.

Adobe fixes 25 critical security holes in its software

flash-logo

Adobe released an important update for its software on Monday, fixing 25 security holes. The updates affect Flash running on Windows, Apple Mac and Linux systems.

In addition, Adobe AIR users on Windows, Mac OS X, Android and iOS are also advised to install an update.

Practical IT: What is your company's threat response strategy?

Practical IT: What is your IT department's threat response strategy?

As someone looking after IT for your company, how do you react to reports of vulnerabilites like those seen recently in Java and Internet Explorer?

Monday review: the hot 21 stories of the week

days-thumb

In case you missed anything, here's a list of every story we've written in the last week, for your reviewing pleasure.

Microsoft warns of Flash vulnerability on IE 10 and Windows 8

Microsoft warns of Flash vulnerability on IE 10, Windows 8

They’re not even available yet, but Windows 8 and Internet Explorer 10 are already the subjects of a Microsoft Security Advisory concerning - you guessed it - Adobe Flash vulnerability.

Monday review: the hot 18 stories of the week

Monday review: the hot 18 stories of the week

It's weekly summary time.

Here's everything we've written in the last seven days.

Emergency security patch issued by Microsoft to squash Internet Explorer zero day exploit

Emergency security patch issued by Microsoft to squash Internet Explorer zero day exploit

Microsoft has released an out-of-cycle security update to protect Internet Explorer users against a vulnerability that was being exploited by malicious hackers.

Microsoft releases fix for Internet Explorer security hole, full patch coming Friday

Microsoft releases fix for Internet Explorer security hole, full patch coming Friday

Microsoft has issued a simple Fix It tool to fix the zero day security vulnerability in Internet Explorer that has been causing headlines this week.

German Government tells all users of Internet Explorer.. to stop NOW

German Government tells all users of Internet Explorer.. to stop NOW

The German government is clearly taking the latest critical security problem in Internet Explorer seriously, publicly urging all users to stop browsing the web with the Microsoft product until a patch is available.

Microsoft advisory: Internet Explorer zero day affects most Windows versions

Microsoft advisory: Internet Explorer zero day affects most Windows versions

A newly discovered and serious security hole in Microsoft’s Internet Explorer web browser affects a wide swath of the company’s Windows and Internet Explorer installations, according to a Security Advisory released by the company late Monday.

SSCC 98 - RSA keys, Blackhole exploits, Nitol botnets and Apache takes potshots at Microsoft

SSCC 98 - RSA key safety, Blackhole exploit kit updated, Nitol botnet takedown and Apache takes potshots at Microsoft

Duck joins Chet to take on the latest security news.

As usual, they don't mince their words, so take a listen and enjoy a quarter-hour mix of news, opinion, advice and research..

New IE zero day exploit circulating, used to install Poison Ivy

New IE zero day exploit circulating, used to install Poison Ivy

The gang behind that recent Java zero day attacks apparently hasn't packed up for the season. A researcher examining one of the servers used to launch attacks on vulnerable Java installations said he found a new zero day exploit for Microsoft's Internet Explorer web browser.