Tue, Sep 18 2012 23:20
bradley
Way to go local news for getting it wrong
My local news tonight said there's an vulnerability with IE. ... so far so good.
They said the German government said to stop using IE (they did, but they've done this before and quite frankly have always been a bit anti Microsoft)
And then they said there was a patch to download on the Microsoft web site.
Gag me with an inaccuracy. There is no patch, we have to wait for a fixit as well as an update.
And in fact right now the vulnerability is only being used in targeted attacks against defense contractors and others.
http://labs.alienvault.com/labs/index.php/2012/the-connection-between-the-plugx-chinese-gang-and-the-latest-internet-explorer-zeroday/
"It seems the guys behind this 0day were targeting specific industries. We’ve seen that they compromised a news site related to the defense industry and they created a fake domain related to LED technologies that can be used to perform spearphishing campaigns to those industries."
Filed under: Security