Microsoft announced it will issue an emergency security update for Internet Explorer (IE) today to patch a zero-day vulnerability that has been used to launch drive-by attacks for at least several weeks.
Article:http://www.networkworld.com/news/2010/032910-microsoft-to-patch-ie-zero-day.html
Manually update your Windows system today to make sure you get the patches.
Use the Update function in the control panel or you can co to Microsoft Update page:
http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en-us
Call me cynical, but maybe their spyware isn't working well enough.
Microsoft doesn't have anti-spyware built into it although they now offer a free application that works pretty good.
Microsoft Security Essentials
Download here free:
http://www.microsoft.com/security_essentials/
Internet Explorer is a part of the Windows operating system and it may use IE even if you don't browse with it.
The updates will be automatic, but getting them as soon as possible prevents zero day attack and other attacks that have been escalating within the last three weeks.
http://www.betanews.com/article/Its-not-dead-yet-Microsofts-outofband-IE6-fix-impacts-IE8/1269902411
Just as well I don't use Interest Exploder then...
:)
I actually meant their spyware - the stuff they use to track your web movements. If Google is being used publicly to spy on people, imagine what goes on behind the scenes. All for our own good, of course.
What IS "zero day", anyway, Cris?
A zero-day (or zero-hour or day zero) attack or threat is a computer threat that tries to exploit computer application vulnerabilities that are unknown to others, undisclosed to the software developer, or for which no security fix is available. Zero-day exploits (actual code that can use a security hole to carry out an attack) are used or shared by attackers before the software developer knows about the vulnerability.
The term derives from the age of the exploit. When a developer becomes aware of a security hole, there is a race to close it before attackers discover it or the vulnerability becomes public. A "zero day" attack occurs on or before the first or "zeroth" day of developer awareness, meaning the developer has not had any opportunity to distribute a security fix to users of the software
The spyware you speak of is not used for malicious purposes.
Spyware installed to your computer such as key loggers are the bad guys. You need a good deal of prevention and a routine of detection and removal to keep your computer running smoothly, reduce spam and keep your computer from becoming a zombie on a botnet.
I do not use IE much but installed the update anyway for just to be sure. Thanks Cris.
@2 @5 I'm with Dez in this.
@8 "The spyware you speak of is not used for malicious purposes. "
Let me be sceptic.
I,m giving a running too Cris, :0)