Exploit in the Wild for New Internet Explorer Flaw
Summary: Less than 24 hours after Microsoft acknowledged an unpatched critical flaw in all versions of Internet Explorer, exploit code for it was posted online. Security experts and anti-virus makers said the same flaw and exploit were used in targeted attacks against Google, Adobe and other major corporations, described as a campaign by Chinese hacking groups to obtain source code and proprietary information.
Bottom line: Microsoft typically patches on the second Tuesday of the month, but the number of companies apparently already hacked by this flaw made an out-of-band fix likely within 7 to 10 days - leaving a browse-to-a-nasty-site-and-get-owned window open in the meantime.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026