Revisiting the Internet Explorer Security Bug
Summary: A McAfee report blamed a previously unknown flaw in Internet Explorer for cyber break-ins at Google, Adobe and more than 30 other Silicon Valley firms, and Microsoft has since acknowledged a critical, unpatched vulnerability that it says has only been observed working against IE6. Researcher Dino Dai Zovi said he modified the exploit to work on IE7, Websense reported a Web site exploiting the flaw, and the governments of France, Germany and Australia urged people to stop using Internet Explorer.
What you should know: Microsoft's assurance that attacks are limited to IE6 did not hold for long, and the governments of France, Germany and Australia did not wait for the patch before telling users to abandon the browser.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026