News

02:08 PM
Connect Directly
RSS
E-Mail
50%
50%

Microsoft: Hackers Used IE Vulnerability in Google Hack

More details are beginning to emerge as the technology community further investigates hacks that originated in China that targeted Google and other corporations. Yesterday afternoon, Microsoft announced that a vulnerability in Internet Explorer was exploited as part of the hacks.

More details are beginning to emerge as the technology community further investigates hacks that originated in China that targeted Google and other corporations. Yesterday afternoon, Microsoft announced that a vulnerability in Internet Explorer was exploited as part of the hacks.From the Microsoft Security Response Center (MSRC):

Based upon our investigations, we have determined that Internet Explorer was one of the vectors used in targeted and sophisticated attacks against Google and possibly other corporate networks. Today, Microsoft issued guidance to help customers mitigate a Remote Code Execution (RCE) vulnerability in Internet Explorer. Additionally, we are cooperating with Google and other companies, as well as authorities and other industry partners.

Microsoft reports that the scope of the threat appears to be limited to these targeted attacks, minimizing widespread customer impact.

From the MSRC:

It is important to note that complex attacks targeting specific corporate networks are becoming more prevalent in the threat landscape, therefore organizations should follow defense-in-depth best practices, and deploy multiple layers of protection to improve their security posture. In addition, Protected Mode in IE 7 on Windows Vista and later significantly reduces the ability of an attacker to impact data on a user's machine. Customers should also enable Data Execution Prevention (DEP) which helps mitigate online attacks. DEP is enabled by default in IE 8 but must be manually enabled in prior versions.

Comment  | 
Print  | 
More Insights
Register for Bank Systems & Technology Newsletters
White Papers
Current Issue
Bank Systems & Technology Dec. 2, 2014
BS&T's 2014 Elite 8 executives are leading their banks to success, whether it involves leveraging the cloud, modernizing core systems, or transforming into digital enterprises.
Slideshows
Video
Bank Systems & Technology Radio
Archived Audio Interviews
Join Bank Systems & Technology Associate Editor Bryan Yurcan, and guests Karen Massey and Jerry Silva from IDC Financial Insights, for a conversation about the firm's 11th annual FinTech rankings.