Skip to main content
Add as a preferred source on Google


Microsoft Warns of New Internet Explorer Zero-Day Attack

In a security advisory released Wednesday, Microsoft warned users of Internet Explorer vulnerability that could allow remote code execution by hackers. The security breach can be accessed on XP, Vista, and Windows 7 systems running Internet Explorer 6, 7, and 8.

According to the advisory, "The vulnerability exists due to an invalid flag reference within Internet Explorer. It is possible under certain conditions for the invalid flag reference to be accessed after an object is deleted. In a specially crafted attack, in attempting to access a freed object, Internet Explorer can be caused to allow remote code execution."

In the event the vulnerability were exploited, hackers would be able to hijack a target's computer to access a network system and install additional malware.

Microsoft stated that it is working on a fix and has suggested a workaround for the possible breach, which can be found here.  

In a blog entry discussing to the vulnerability, Jerry Bryant, group manager of response communications in the Microsoft Trustworthy Computing Group, said that Microsoft acted quickly when the malicious code had been pinpointed to a single Web site. "When a Web site is discovered to host malicious software, we work through legal channels to take the site down," wrote Bryant. "These kinds of attempts to exploit systems and the people using technology are the activity of criminals. Microsoft takes this very seriously and where possible, we will take legal action against those responsible."

In addition to the workaround provided by Microsoft, Bryant suggested that all applicable software be up-to-date and that firewalls, anti-spyware, and anti-virus programs be up and running.  

About the Author

Chris Paoli (@ChrisPaoli5) is the associate editor for Converge360.

Featured

  • circuit patterns

    Anthropic Intros Lower-Cost Claude Sonnet 5

    Anthropic has launched Claude Sonnet 5, positioning the model as its most autonomous mid-tier offering to date and a lower-cost alternative to its flagship Opus 4.8 system. The company said the model can plan multi-step tasks, operate tools such as browsers and terminals, and complete agentic work at a level that previously required larger and more expensive models.

  • Abstract Network of Blue and Orange Lines

    Tech Industry Leaders Launch Alliance for AI Agent Security

    NVIDIA and 36 other industry partners are targeting agent security across multi-vendor clouds by combining open technologies for workload identity, agent controls, vulnerability scanning, and software supply-chain security.

  • digital brain integrating legal regulation and security interface

    Survey: Agentic AI Moves from Pilot Phase to Production, Bringing Governance to the Forefront

    A new report from Caylent, an AI-focused Amazon Web Services Premier Tier Services Partner, found that enterprises are already moving agentic AI beyond pilots and into production environments. At the same time, organizations are putting strict conditions around autonomy, making governance and control the next major challenge for enterprise AI adoption.

  • Abstract background with digital shield made of data particles glowing blue blocking against cyber attacks

    AI Attacks Push Organizations Toward Autonomous Cybersecurity Defense

    Artificial intelligence is raising the stakes of cyber conflict as attackers use the technology to accelerate reconnaissance, uncover vulnerabilities, and launch attacks faster than many security teams can respond, according to a new report from agentic AI security company Kai.