New IE zero-day attack reported

Summary: Security company FireEye has found a zero-day exploit in Internet Explorer hosted on a breached web site in the United States. EMET may be used to mitigate.

 

Interesting.

 

The fact that the second stage isn't written to a file makes the threat even more worrisome. Rebooting would get rid of it of course but, without knowledge your system was compromised, how would you be able to tell if sensitive data was stolen?

 

Good question. Pretty scary stuff.

 

Update: ZDNet.com > IE zero-day is targeted, sophisticated

 

I hope they figure this out real quick.

 

I do too but it doesn't look to promising. Microsoft has yet to publicly acknowledged either the attack or the vulnerability behind it.

 

I wonder why MS is not acknowledging it.

 

<-shrug->

 

Maybe they're ascared no one will use IE.

 

Last I saw it was close to 30%, with Chrome at roughly 35-40% and Firefox just under 20%.

 

Microsoft to patch zero-day bug Tuesday (today)

 

Downloaded and installed the patches. All went well. No glitches.

 

Ditto.

 

Doc. Thanks for the heads up on that threat really appreciate it.

 

No problem LJ.