APPLICATIONS

IE Vulnerability Being Used In Widespread Attacks

01:13 Friday Feb 28, 2014

            

The exploit is being distributed from many compromised websites around the world.

The number of attacks exploiting a yet-to-be-patched vulnerability in Internet Explorer 9 and 10 first reported on February 13 by researchers from security firm FireEye, has increased dramatically over the past few days, indicating the exploit is no longer used just in targeted attacks against particular groups of people.  Microsoft has released a 'fix it tool' but not a regular patch."

The attacks reported by FireEye and Websense are known as "watering hole attacks" because they involve compromising websites visited by particular groups of people that attackers wish to target, in these particular cases U.S. military personnel (Veterans of Foreign Wars (VFW) website) and French defense contractors (French aerospace association GIFAS (Groupement des Industries Francaises Aeronautiques et Spatiales).

Fortunately, the attacks were not widespread. They were directed at specific targets - so-called APT (Advanced Persistent Threats) attacks, commonly attributed to rogue government organizations.

Users should either upgrade to Internet Explorer 11, which is not affected by this vulnerability, or install the Fix It solution provided by Microsoft.

There's still no word on when Microsoft will supply a comprehensive fix.

 

 

< Back

    Add your comment

    We aim to have healthy debate. But we won't publish comments that abuse others

    1200 characters left

     

     

    LATEST NEWS

     
      

    © copyright 2013 Website News. All rights reserved.

     

    SECTIONS

    ABOUT

    SUBSCRIBE

     

    Website News is for and about the website design, development, marketing industry. We will endeavor to bring you up-to-date news and information to help you in your work as well as give you useful information and tips for your clients and their businesses.

    We are always keen for you to submit any information you find from elsewhere, or about your business, that you feel will be relevant.

     

     

     

     

    Contact Us:

    For advertising enquiries or to submit a story, please email us at: editor@websitenews.co

     

    Login

    Website News

    Sign-up to Website News and create your universal Woogloo ID

    Your details

    Your login details

    Your address


    Is your address not being found?

    Company

    Company address

    Yes No


    To register on the Website News website you either need to use your
    exisitng Woogloo ID or create a new one (see below).

    Sign Up

    Why sign up?

    • Get access to Registered User's priviledges, which may include hidden pages, special features and special pricing, if they exist, on this website.
    • Get access to all sites powered by Woogloo V3 without having to enter your details everytime.

    Login Error

    Forgot your password?

    Enter your email address below and click 'Reset Password' Button




    What is a Woogloo ID

    Logging in...