Barney's Blog

Blog archive

Patch Tuesday Leads to Attack Wednesday

A day after Microsoft publicly fixed 28 holes (including four Internet Explorer flaws), a researcher found that hackers already have an attack for IE 7.

The exploit delays the processing of XML tags, can crash the browser (though IE and Firefox do a great job of crashing on their own, at least on my aging Latitude D520) and can then inject malicious code upon browser restart.

There may well be a fresh patch to beat back these attacks. We'll keep you posted.

Posted by Doug Barney on 12/11/2008 at 1:16 PM


Featured

  • Microsoft Offers More Help on Windows Server 2008 Upgrades

    Microsoft this week published additional help resources for organizations stuck on Windows Server 2008, which fell out of support on Jan. 14.

  • Microsoft Ups Its Carbon Reduction Goals

    Microsoft on Thursday announced a corporatewide carbon reduction effort that aims to make the company "carbon negative" by 2030.

  • How To Dynamically Lock Down an Unattended Windows 10 PC

    One of the biggest security risks in any organization happens when a user walks away from their PC without logging out. Microsoft has the solution (and it's not a password-protected screensaver).

  • First Stable Chromium-Based Microsoft Edge Browser Released

    Microsoft on Wednesday announced the first release of its Chromium-based Microsoft Edge browser at the "stable" commercial-release stage.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.