Microsoft says it will fix an Internet Explorer security bug under active attack
Microsoft has confirmed a security flaw affecting Internet Explorer is being used by hackers, but it does not have any immediate plans.
At a late-evening tweet, US-CERT, the branch of Homeland Security tasked with reporting major security flaws, tweeted a link to a security advisory detailing the bug, describing it as “being exploited in the wild.
Microsoft explained all supported the flaw affects versions of Windows, including Windows 7, which later this week longer receives security upgrades.
The vulnerability was found in Internet Explorer handles memory. An attacker could use the flaw to run malicious code like tricking a user into opening a malicious website via a search query or a link.
It’s thought to be a vulnerability as one earlier this week revealed by Mozilla, the maker of the Firefox browser. Both Microsoft and Mozilla credited Qihoo 360 with finding flaws. Earlier in the week, a tweet referencing a flaw in Internet Explorer was deleted by Qihoo 360.
Neither Qihoo, Microsoft, nor Mozilla explained attackers exploited the bug, who the attackers were, or that was being targeted. The U.S. government’s cybersecurity advisory unit issued a warning about present exploitation.
Microsoft told TechCrunch that it had been was” aware of limited targeted attacks” and had been “working on a fix,” but it was unlikely to launch a patch before its next round of monthly security fixes — scheduled for February 11.
The bug was assigned by Microsoft CVE-2020–0674, with a frequent vulnerability identifier, but certain details of the insect have yet to be released. When reached, a Microsoft spokesperson did not comment.
About:
DU Home Internet is a home internet service provider that offers great internet services in the UAE at the most competitive price and services.
