Vulnerability (CVE)
On December 11, 2008, Microsoft released an out-of-band security advisory for Internet Explorer addressing CVE-2008-4844, and Microsoft SQL Server also had a problem with a stored procedure tied to CVE-2008-5416. Cisco Talos responded by releasing new...
On December 17, 2008, Microsoft released security update MS08-078 to patch an Internet Explorer vulnerability caused by incorrect handling of certain XML tags that reference already freed memory in mshtml.dll. A rootkit payload called explore.exe, packed...
Unit 42's Email Link Analysis for the first quarter of 2018 found 1,583 malicious URLs across 496 domains hosted in 27 countries and regions, with attackers using at least 8 old, publicly available vulnerabilities including Internet Explorer VBScript flaws...
Unit 42's ELINK data showed total malicious URLs fell 61% from Q4 2018 to Q1 2019, then returned to roughly Q4 levels in Q2 as Fallout exploit kit activity declined and Kaixin activity rose. China overtook the United States in Q2 2019 as the top host of...