Summary: This vulnerability affects: All current versions of Internet Explorer How an attacker exploits it: By enticing one of your users to visit a web page containing malicious content Impact: Various, in the worst case an attacker can execute code on your user's computer, potentially gaining complete control of it What to do: Deploy the appropriate Internet Explorer … [Read more...]
Out-of-Cycle Word FixIt Corrects Zero Day Vulnerability
If you're worried about spear phishing attacks (and if you're not, you should be), grab Microsoft's emergency FixIt to mitigate a zero day vulnerability attackers are exploiting in the wild. In a security advisory released yesterday, Microsoft warned of a zero day vulnerability in Word, which attackers are exploiting in what Microsoft describes as limited, targeted attacks. … [Read more...]
Latest IE Update Patches Zero Day Hole and 17 Others
Summary: This vulnerability affects: All current versions of Internet Explorer How an attacker exploits it: By enticing one of your users to visit a web page containing malicious content Impact: Various, in the worst case an attacker can execute code on your user's computer, potentially gaining complete control of it What to do: Deploy the appropriate Internet Explorer … [Read more...]
Grab Adobe and Microsoft's Emergency Flash and IE Fixes
Let's start with the short version. Yesterday, both Microsoft and Adobe released out-of-cycle updates to fix zero day security vulnerabilities that advanced attackers are exploiting in the wild via "watering hole" campaigns. If you use these products and haven't installed the updates, go get the Flash and Internet Explorer (IE) fixes now! The slightly longer story is early … [Read more...]
Cyber Tradecraft; Defending Against Drive-by Downloads
Imagine this… You’re perusing the ancient and colorful Grand Bazaar in Istanbul, feeling overwhelmed by all the interesting sights, sounds, and smells. An excited and charismatic shop owner waves you over to his wares, enticing you to contemplate the colorful baubles he has on display. As you’re thus distracted, a quiet, inconspicuous character jostles you lightly from behind, … [Read more...]