Another wave of attacks target Internet Explorer
Other versions of Internet Explorer are now vulnerable to exploitation, including the new beta of the latest update.

The Internet Explorer vulnerability currently investigated by Microsoft has spread to other versions of the browser, including the newest Internet Explorer (IE) 8 Beta 2.
A new advisory has warned that as well as Internet Explorer 7, other versions potentially vulnerable to attacks are IE 5.01 Service Pack 4, IE 6 Service Pack 1, IE 6 and IE 8 Beta 2.
The vulnerability looks like it is getting very serious, with Ivan Macalintal, advanced threats researcher for Trend Micro, reporting that the number of infected sites had risen to 6,000 and was quickly increasing in number.
Microsoft researchers Ziv Mador and Tareq Saade also said that attacks had risen significantly over the weekend, with an increase of over 50 per cent in the number of reports.
There are more technical details of the vulnerability as well as some workaround options to make Internet Explorer safe from danger here.
However, some experts have advised users to use an alternative browser until Microsoft issues a patch for the problem.
The website Shadowserver has listed a number of domains known to be exploiting the vulnerability. According to Microsoft, the current trend for attack uses SQL injection attacks against websites, and proceeds to load attack code.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
In the new advisory, Microsoft repeated its previous statement that it would take the appropriate action once it had completed the investigation.
-
Should AI PCs be part of your next hardware refresh?
AI PCs are fast becoming a business staple and a surefire way to future-proof your business
By Bobby Hellard Published
-
Westcon-Comstor and Vectra AI launch brace of new channel initiatives
News Westcon-Comstor and Vectra AI have announced the launch of two new channel growth initiatives focused on the managed security service provider (MSSP) space and AWS Marketplace.
By Daniel Todd Published
-
Exploitation of Docker remote API servers has reached a “critical level”
News Hackers are targeting Docker’s remote access API as it allows them to pivot from a single container to the host and deploy malware with ease
By Solomon Klappholz Published
-
Cyber criminal underground “thriving” as weekly attacks surge by 75% in Q3 2024
Cyber attacks reached another all-time high this quarter as digital crime continues to be a highly profitable industry for threat actors
By Solomon Klappholz Published
-
Alarm raised over patched Phemedrone Stealer malware that's being used to target Windows PCs - here's what you need to know
News Phemedrone Stealer is being used to exploit a vulnerability in Windows Defender SmartScreen despite the issue being patched in November 2023
By Solomon Klappholz Published
-
SOC modernization and the role of XDR
Whitepaper Automate security processes to deliver efficiencies across IT
By ITPro Published
-
Uncovering the ransomware threat from global supply chains
Whitepaper Effectively mitigate ransomware risk
By ITPro Published
-
The near and far future of ransomware business models
Whitepaper Discover how criminals use ransomware as a cyberweapon
By ITPro Published
-
Trend Micro security predictions for 2023
Whitepaper Prioritise cyber security strategies on capabilities rather than costs
By ITPro Published
-
'Potentially unsecured' SMBs are propping up an IT supply chain riddled with ransomware
News More than half of IT supply chains have been impacted by ransomware attacks in recent years and organisations are failing to implement the necessary steps to prevent future damage
By Connor Jones Published