IE users advised to switch over flaw |
Connect with TechFlash on our Facebook page for all the latest technology news headlines and commentary, plus information and access to special events, photos from events, promotions and more.
[Update: Microsoft plans to release a patch for the flaw Wednesday morning. Details at the bottom of post.]
Microsoft is offering an elaborate set of workarounds to help Internet Explorer users avoid attacks on an unpatched flaw that surfaced last week. Security researchers and bloggers are offering a different solution: Stop using IE altogether, at least temporarily.
"Switch to another browser, preferably Firefox. This is by far the best option," writes Richard Wray of the Guardian in a post today.
For all of the efforts Microsoft has made to tighten the security of its software, the situation demonstrates the continued potential for vulnerabilities to affect market share. Internet Explorer's problems with spyware helped Firefox gain traction several years ago.
The latest flaw lets hackers attack computers that visit compromised Web sites. It's especially concerning because it's a "zero-day" vulnerability, already being exploited before a fix is available. Microsoft says it's investigating the situation and will take "appropriate action," which could include issuing a patch out of its normal monthly cycle.
"I would advise Windows users to consider browsing the Web with anything other than Internet Explorer, at least until Microsoft issues a patch to fix this vulnerability," wrote Washington Post security blogger Brian Krebs in a post after the flaw came to light last week. "It is not my intention to over-hype the situation, but as we have seen time and again, attackers are usually very quick to take advantage of flaws in IE because the program is the default browser for close to 80 percent of the planet."
Microsoft, meanwhile, seems to be grappling with precisely how to characterize the severity of the situation.
In a post Saturday on the Microsoft Malware Protection Center blog, Ziv Mador and Tareq Saade initially wrote that they saw "a huge increase in the number of reports today compared to yesterday." That language has since been changed to say that they saw "an increase of over 50% in the number of reports today compared to yesterday."
Watch this Microsoft site for ongoing details and updates on the flaw.
Update, 2 p.m.: Microsoft said this afternoon that it will issue a special security patch for the Internet Explorer vulnerability Wednesday morning via Automatic Updates and Microsoft Update. Details on this Microsoft page.
If you are commenting using a Facebook account, your profile information may be displayed with your comment depending on your privacy settings. By leaving the 'Post to Facebook' box selected, your comment will be published to your Facebook profile in addition to the space below.
Who's creating today's energy efficient buildings? Find out at the BetterBricks Awards, Feb. 16
BetterBricks Awards salute the individuals leading the way for high performance commercial buildings with an emphasis on energy efficiency. Join us as we recognize these standout green building professionals.
Award categories include: Advocate; Architect/Designer; Facility Manager/Operator; and Owner/Developer.
Keynote Speaker: Kevin Kampschroer, Director of U.S. GSA's Office of Federal High Performance Buildings. Kevin leads the U.S. General Services Administration's efforts in building sustainability and accelerating industry adoption of sustainable principles across all aspects of a building's life.
Register here by February 10!
If you are interested in buying a table, email Monica Alquist or call her at 206-876-5404.
The Triple Door Presents: The Atomic Bombshells "J'ADORE!: A Burlesque Valentine"
Seattle's reigning Burlesque super-troupe delivers a gorgeous and glittering VALENTINE featuring some of the Bombshells' most exhilarating acts to date. J'Adore! promises to celebrate l'amour with good humor, style, and a healthy dose of dazzle! Bring a friend, a lover, a family member, or a secret crush, and celebrate with the Valentine's Burlesque spectacular that will leave you shouting: "J'ADORE......The Atomic Bombshells!" The incomparable Jasper McCann emcees with high style and charm.
Please visit www.thetripledoor.net for a full schedule of future performances.
The Triple Door Presents: Bob Mould – See A Little Light: An Evening of Reading and Music
"Bob Mould. Those two words are synonymous with integrity. From Husker Du in the last century to right at this moment, Bob is the real deal, writing and playing music for music's sake. He's a great songwriter and performer. I have been a fan of Bob's for thirty years now with no end in sight." -Henry Rollins
Please visit www.thetripledoor.net for a full schedule of future performances.
Why Choose BDO for your SOC (previously SAS 70) Reports?
BDO’s experience in providing attestation services (SAS 70/SSAE 16, AT 101, AT 201, AT 601, etc.) to a broad range of industries, and our team of skilled professionals distinctly qualifies us to serve as your company’s Service Auditor. By leveraging the BDO global network of control specialists, we are poised to provide global services in more than 1,000 offices and across 119 countries. Many organizations find that investing in reports on controls may result in benefits, including:
• Increased client confidence
• Improved competitive advantage
• Minimization of frequent audits
• Streamlined business processes and controls
• Enhanced risk management
For detailed information contact Paul Martini at pmartini@bdo.com.