Hackers Given Keys to IE 7 Kingdom -- Redmondmag.com

Barney's Blog

Hackers Given Keys to IE 7 Kingdom

I'm a fan of how public Microsoft is with its security flaws. Patch Tuesday is a tradition that Microsoft should be proud of -- not for the holes, but for the public fixes.

But patches are like blueprints for a hacker, who can now understand the hole and attack unpatched systems. That's what's happening with IE 7 as hackers take the hole disclosed earlier this month and go after it with gusto.

The vulnerability is that hackers can use deleted data, like the history and cookies, as a vector of attack. The fix is in; some of you might as well get it.

Posted by Doug Barney on 02/20/2009 at 1:16 PM

Featured

Cisco Warns of Brute Force Attacks Targeting VPNs and Firewalls

Cisco has revealed that a global increase in brute force attacks targeting Virtual Private Networks (VPNs) and other devices is currently taking place.
What's Inside Microsoft 365's Security Toolbox?

Microsoft provides plenty of native tools to secure Microsoft 365. IT pros just have to know where to look.
Microsoft Kills 30-Day Data Retention Policy for Copilot in Fabric

Microsoft this week announced several usability improvements coming to Copilot in Fabric in preparation of its general availability release later this year.
Using Microsoft Office to Build a Network Diagram 2

Now that we've set up our process, let's dig in with the actual execution.
Microsoft Graph 'Activity Logs' Feature Goes Live

Microsoft announced the general availability of the "activity logs" capability in Microsoft Graph, giving administrators more options to track user activity and identify patterns of potential misuse.