Cyber Risks · Krebs on Security

McAfee: Internet Explorer 0day Fueled Attacks on Google, Adobe

Summary: McAfee reported that the targeted attacks on Google, Adobe and other companies were partly fueled by a previously unknown and then-unpatched Internet Explorer vulnerability present in all of Microsoft's most recent operating systems, including Windows 7. Microsoft later issued an advisory confirming the flaw in all supported versions of IE on supported Windows versions, while iDefense said at least 33 companies were affected and reported victims grew to include Yahoo, Symantec, Northrop Grumman and Dow Chemical.

Key Takeaway: A single unpatched browser flaw sat inside every supported Windows release while attackers went after trade secrets and source code at dozens of companies, and the exploit code was public within a day of disclosure.

Read the original at Krebs on Security ↗

Topics
Phishing & Social Engineering
Related