IE

(get it in RSS or Atom)

May Patch Tuesday critical for users of Internet Explorer and web-based services

Patch Tuesday

Microsoft has just released its monthly updates for May 2013. The zero-day IE flaw used on the Dept of Labor website was fixed, as well as an IE 10 hole used at PWN2OWN.

Critical fixes for Adobe Reader, Flash Player and ColdFusion also hit the streets today.

PWN2OWN results Day Two - Adobe Reader and Flash owned, Java felled yet again

PWN2OWN 2013 finished off today.

A second scheduled attack on IE 10 didn't happen, so IE 10 didn't get owned again, but Flash and Reader fell once each, and Java was exploited for the fourth time in two days...

PWN2OWN results Day One - Java, Chrome, IE 10 and Firefox owned

Of the Big Four browsers, only Apple's Safari has so far survived the onslaught of the browser-breakers at PWN2OWN 2013.

Java fell three times today; Adobe's Flash and Reader meet their attackers tomorrow...

Monday review - the hot 26 stories of the week

dow-250

In case you missed any recent stories, here's everything we wrote in the last seven days.

IE 10 is more secure, so here's a Microsoft tool to prevent you updating by mistake

IE 10 is more secure, so here's a Microsoft tool to prevent you updating by mistake

Ironically, Microsoft is making sure that as soon as Internet Explorer 10 is ready on Windows 7, you're already ready to avoid it.

A sort-of "lesser of two evils" solution for change control conservatives.

PWN2OWN - hack the Big Four browsers in public and go home with half a million dollars

targets-250

Only six weeks to go until PWN2OWN 2013, where you can hack the Big Four browsers and the Big Three plugins, and win over half a million dollars.

But is it just about the money?

Paul Ducklin investigates...

Fun with statistics: Who hates Java the most?

Over the past five days, lots of you have used Naked Security to find out how to turn off Java in one of the five major browsers.

And that has given us browser statistics. There are too many variables to know what they tell us, but they do make a neat-looking graph!

Microsoft to release an emergency security patch for Internet Explorer zero day flaw

Microsoft will be releasing an out-of-band patch for the recently-disclosed zero-day hole in Internet Explorer.

Find out if you need the patch, and start getting ready now. This one really is critical.

Monday review - the hot 17 stories of the week

OK, these aren't just the hot 17 stories of the past week, but of the two weeks before that, too.

If, like us, you've been enjoying some downtime over the Christmas and New Year holidays, here's your quickest way to get back up to speed with Naked Security...

Monday review - the hot 18 stories of the week

Here you go.

All the stories we wrote in the past seven days, in case you missed anything (or just want to read them again).

Internet Explorer flaw allows attackers to track your mouse movements

Internet Explorer flaw allows attackers to track your mouse movements

An Internet Explorer vulnerability allows hackers to track mouse cursor movement anywhere on the screen, even if a given window is inactive, unfocused or minimised. It can also compromise the security of virtual keyboards and keypads, thereby thwarting their use against keyloggers.

Microsoft advisory: Internet Explorer zero day affects most Windows versions

Microsoft advisory: Internet Explorer zero day affects most Windows versions

A newly discovered and serious security hole in Microsoft’s Internet Explorer web browser affects a wide swath of the company’s Windows and Internet Explorer installations, according to a Security Advisory released by the company late Monday.

SSCC 98 - RSA keys, Blackhole exploits, Nitol botnets and Apache takes potshots at Microsoft

SSCC 98 - RSA key safety, Blackhole exploit kit updated, Nitol botnet takedown and Apache takes potshots at Microsoft

Duck joins Chet to take on the latest security news.

As usual, they don't mince their words, so take a listen and enjoy a quarter-hour mix of news, opinion, advice and research..

Monday review: the hot 22 stories of the week

Monday review: the hot 26 stories of last week

In case you missed any recent stories, here's everything we wrote in the last seven days.

Patch Tuesday - what to know and what to do for Microsoft and Adobe users

Patch Tuesday - what to know and what to do for Microsoft and Adobe users

Both Adobe and Microsoft published Patch Tuesday updates this week.

There are plenty of issues to be concerned about - so we've written up our recommendations to help you prioritise your own patching...

Which browser is safest? The browser wars are back and this time you win

browser logos

The upcoming releases of Internet Explorer 10, Firefox 14 and Chrome 21 are all fighting for our attention and using security as the reason why.

IE remote code execution vulnerability being actively exploited in the wild

IE remote code execution vulnerability being actively exploited in the wild

A critical Internet Explorer vulnerability, announced and patched by Microsoft in June's Patch Tuesday, is being exploited in the wild.

Find out how hackers bypass modern protections like DEP and ASLR - and if you haven't patched yet, do it now!

Gmail accounts targeted by 'state-sponsored attackers' using Internet Explorer zero-day vulnerability

Internet Explorer zero-day being used by 'state-sponsored attackers' to hijack Gmail accounts

Both Google and Microsoft have put out alerts about an unpatched, zero-day hole in Internet Explorer that is actively being exploited in the wild.

Facebook teaches users how to kill adware

Facebook_thumb

Curious to know who's been checking you out on Facebook? Tempted to see who's visited your timeline? Put that click-happy finger away!

Patch Tuesday - June 2011 - 16 bulletins, 9 critical

JunePT250

It's time to patch! Today is Patch Tuesday for June 2011, and it's a big one. Read on for the details and advice from SophosLabs.