The New Disclosure Debate and the Evil Mr. Moore
Summary: Cisco Talos recounts a March 9 Internet Explorer 6 and 7 zero-day, exploited in the wild via an invalid pointer accessed after an object is deleted, with Microsoft offering mitigations aimed mainly at Vista, Server 2003 and 2008. McAfee named the attack site topix21century.com on the evening of March 9, and Moshe Ben Abu released a Metasploit module for the flaw in under 24 hours.
What's compelling: The article's point is that naming the attack site gave defenders something actionable - block its IPs at the firewall and watch DNS and firewall logs for hosts reaching it - while McAfee then said future blog posts would be subject to additional sanitization, narrowing exactly that kind of information.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026