Entries with tag exploits.

Security Researchers Find that Hackers Increasingly Exploit Unpatched Browser Vulnerability

An unpatched vulnerability in all versions of Microsoft’s Internet Explorer browser is raising concerns as it poses what The SANS Institute’s Internet Storm Center called a “significant new threat” to Internet users. The Internet Storm Center elevated its Internet threat rating because of the vulnerability, based on increased evidence of exploits. Attacks are reportedly being launched against Internet Explorer 8 and 9, but the vulnerability affects all versions of Microsoft’s browser. Security vendor FireEye recently released a detail analysis of an ongoing campaign of attacks—based on the vulnerability—focused on Japanese organizations since August. The attacks compromise and install malware on Windows PCs. Microsoft—whose next scheduled patch release is 8 October—has not yet indicated when it will release a fix for the browser vulnerability. (Computerworld)(Internet Storm Center)(FireEye)

Java-Based Exploits Exploding

New security research from Microsoft shows that Java attacks have increased sharply since the third quarter of 2011 making Java by far the biggest malware target. “The recently released Microsoft Security Intelligence Report said this is the case because Java is widely used across multiple platforms and has many possible vulnerabilities. The study said that attackers are focused on older, patched vulnerabilities in Java in order to take advantage of those systems that have not applied the fixes and are also trying to take advantage of vulnerabilities across multiple Java versions. The report (www.microsoft.com/security/sir/default.aspx) studied attacks between July 2012 and December 2012. (SlashDot)(ThreatPost)(Microsoft Security Intelligence Report)

Showing 2 results.