Oh Really Internet Explorer ? A long running vulnerability !

[Arakasi 549]

New Zero-Day Exploit targeting Internet Explorer Versions 9 through 11 Identified in Targeted Attacks

 

hxxp://www.fireeye.com/blog/uncategorized/2014/04/new-zero-day-exploit-targeting-internet-explorer-versions-9-through-11-identified-in-targeted-attacks.html

[Arakasi 549]

The exploit page loads a Flash SWF

HAHA , Thanks Adobe

[SweX 871]

Well done Microsoft, well done indeed. A fix for the (still many) Win XP users is also released.  

 

Microsoft to release IE security patch today, including one for Windows XP

 

We have made the decision to issue a security update for Windows XP users. Windows XP is no longer supported by Microsoft, and we continue to encourage customers to migrate to a modern operating system, such as Windows 7 or 8.1. Additionally, customers are encouraged to upgrade to the latest version of Internet Explorer, IE 11.

hxxp://www.neowin.net/news/microsoft-to-release-ie-security-patch-today-including-one-for-windows-xp

Edited May 1, 2014 by SweX

[SweX 871]

One of the things that drove much of this coverage was that it coincided with the end of support for Windows XP.  Of course we’re proud that so many people loved Windows XP, but the reality is that the threats we face today from a security standpoint have really outpaced the ability to protect those customers using an operating system that dates back over a decade.  This is why we’ve been encouraging Windows XP customers to upgrade to a modern, more secure operating system like Windows 7 or Windows 8.1.

 

Even though Windows XP is no longer supported by Microsoft and is past the time we normally provide security updates, we’ve decided to provide an update for all versions of Windows XP (including embedded), today.  We made this exception based on the proximity to the end of support for Windows XP.  The reality is there have been a very small number of attacks based on this particular vulnerability and concerns were, frankly, overblown.  Unfortunately this is a sign of the times and this is not to say we don’t take these reports seriously.  We absolutely do. 

hxxp://blogs.technet.com/b/microsoft_blog/archive/2014/05/01/updating-internet-explorer-and-driving-security.aspx

[Arakasi 549]

I've been doing nothing but, patch patch patch, update, the last few days.

[SweX 871]

Meaning the business $$$ keeps rolling on    

[Arakasi 549]

Windows XP expiration is doing that !!

[SweX 871]

Haha right I guess it will continue to do that for quite some time