Internet Explorer Users: Please Read This
Summary: Microsoft urged Windows users browsing with Internet Explorer to install a free tool called EMET to block attacks against an unpatched critical hole in IE versions 7, 8 and 9. Rapid7 engineering manager Tod Beardsley told The Associated Press that EMET does not appear to be completely effective against the publicly available Metasploit exploit, and Metasploit founder HD Moore noted the exploit requires Java on the host to execute against IE 8/9 on Windows 7 and Vista.
Key Takeaway: The workaround Microsoft is pointing users to may not stop exploit code that is already public in Metasploit, leaving IE 7, 8 and 9 users exposed until a proper patch ships.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026