Barney's Blog

Blog archive

Hackers Given Keys to IE 7 Kingdom

I'm a fan of how public Microsoft is with its security flaws. Patch Tuesday is a tradition that Microsoft should be proud of -- not for the holes, but for the public fixes.

But patches are like blueprints for a hacker, who can now understand the hole and attack unpatched systems. That's what's happening with IE 7 as hackers take the hole disclosed earlier this month and go after it with gusto.

The vulnerability is that hackers can use deleted data, like the history and cookies, as a vector of attack. The fix is in; some of you might as well get it.

Posted by Doug Barney on February 20, 2009 at 11:53 AM


Featured

  • Report: U.S. Web Sites Not Protecting Your Private Data

    According to a study announced Friday by privacy compliance solutions vendor Zendata, many Web sites were found to have woeful data protection practices in place.

  • The 2022 Microsoft Product Roadmap

    Microsoft has a lot in the docket for 2022, including new products like SQL Server 2022, Exchange Subscription Edition and Visual Studio 2022 for Mac.

  • Azure Sphere OS Version 22.01 No Longer Happening

    Microsoft will no longer be releasing its previously announced Azure Sphere version 22.01 operating system, the company announced on Wednesday.

  • Is Microsoft's Free Windows 11 Upgrade Offer Coming to an End?

    Microsoft may be alluding to the end of the free Windows 11 upgrade for Windows 10 users.