Microsoft to secure IE for XP only
178843
If you&#39;re one of about 200 million people using older versions of Windows and you want the latest security enhancements to Internet Explorer, get your credit card ready.
586376
Microsoft Corp.  on Tuesday  released a security patch to fix a "critical" hole in its  Internet Explorer Web browser that the world's biggest software  maker said could allow an attacker to take control of a user's  computer.
684647
Microsoft Corp. has put the finishing touches on one of its biggest software overhauls ever after conceding that its Windows XP operating system -- which runs as many as 300 million computers worldwide -- is susceptible to security breaches.
278592
A REPORT last week said that Microsoft will not build the latest security features in Windows XP browser and expects customers to upgrade to the OS from previous software to gain prophylactic protection.
663754
Microsoft has confirmed the existence of a vulnerability affecting the Windows Shell. The issue exists in the WebViewFolderIcon ActiveX control, and exploitation could result in an attacker gaining the same rights as a local user.
160045
Microsoft tells corporate administrators that it will push a new version of Internet Explorer 7 their way in February. Here's how to avoid it if you wish.
116589
Some say Win XP SP2 enhancements cause conflicts, don't protect as claimed.
567801
A newly found vulnerability in Microsoft's Internet Explorer browser could allow an attacker to take over a targeted machine -- even one with all its patches up to date.
42547
(InfoWorld) - Hackers have discovered a new vulnerability in Internet Explorer, and they've released code that could be used to attack users of Microsoft Corp.'s popular browser. The vulnerability is similar to a bug thatÂ Microsoft patched last month in a multimedia component of Internet Explorer, according to Vincent Hwang, a group product manager with Symantec's Security Response team. Though a sample exploit of the vulnerability was posted Wednesday by hackers on the xsec.org Web site, Symantec has yet to see the code used in any attacks, according to Hwang. To take advantage of the exploit code, attackers would first need to trick users into viewing a maliciously encoded Web page, but they could then run unauthorized code on a victim's computer. It is unclear right now which versions of Windows and Internet Explorer are affected by the vulnerability. Researchers at Secunia said they were able to create a "fully working" exploit for the latest version of Windows XP running Internet Explorer 6. Windows 2000 users are also vulnerable, Secunia said. Microsoft security researchers were unavailable to comment on the issue, but a spokesman for the company's public relations agency said that the matter was under investigation. Symantec calls the bug "critical," andÂ Secunia rates the issue as "highly critical," its most severe rating. The xsec.org hackers referred to their code as a 0day, meaning an exploit for a previously undisclosed vulnerability. But one well-known hacker said the flaw was not difficult to find using publicly available security tools, such as the AxMan ActiveX fuzzing software. "Calling it 0day is a stretch," said HD Moore, the head of the Metasploit project, via e-mail. Moore wrote an automated ActiveX testing tool called AxMan that uncovered a handful of IE bugs, including the one exploited by on xsec.org. Although Moore recently launched a project called the Month of Browser Bugs, in which he disclosed a new browser vulnerability every day for the month of July, he said he had refrained from disclosing this particular vulnerability. "This is one of the many exploitable bugs that can be discovered using AxMan and one of the few that I didn't include in Month of Browser bugs due to the ease of exploitation," he said. "I still have three or four left in IE that have similar impact." This is the second unpatched flaw that Microsoft is looking at patching right now. Earlier this month, attackers began exploiting a vulnerability in the company's Word software.
632400
(InfoWorld) - Windows Vista will be the most secure operating system that Microsoft Corp. has released, a company executive said Tuesday at a Vista launch event in Washington, D.C. Microsoft has listened to feedback from users, who disagreed with the decision to have some security features turned off by default in Windows XP, said Bill Veghte, Microsoft's corporate vice president for North America. "I won't mince words," Veghte said to an audience of nearly 3,000 people. "Every single time we had a trade-off between application compatibility or security, we went with security." ButÂ Windows VistaÂ also includes a feature that shows users which applications have problems after switching from an earlier version of Windows and the fixes that are available for those issues, Veghte said. Microsoft will also submit its Office SharePoint Server 2007 for U.S. Department of Defense (DOD) certification for electronic records management, Veghte said. Microsoft, working with partner Applied Information Sciences Inc., expects to have SharePoint Service compliant with DOD 5015.2 standard in May. The DOD standard focuses on secure records handling, requiring encryption on Web-based applications, the ability to schedule records to expire, and the ability to restrict user access to documents. Applied has developed a Records Management Center add-on pack to SharePoint Server, part of the MicrosoftÂ Office 2007 suite released Tuesday along with Vista. That add-on will allow users to comply with the DOD standard and have "military-grade" records management, said Russ Stalters, Applied's chief technology officer. The add-on package will allow customers to collaborate using SharePoint without buying third-party records-management software, as SharePoint users have had to do in the past, Stalters said. By complying with the DOD standard, the software package "sets the bar" for records management for customers in highly regulated industries, he said. In addition to the DOD compliance, Microsoft's new offerings contain several new security features, Veghte said in his speech. Microsoft has the responsibility of setting the standards for secure defaults and architecture in Vista, he said. Hackers are not standing still, and "we have to keep pace," he said. Among the new security features in Vista: -- System administrators can stop PCs from allowing USB (Universal Serial Bus) drives or other peripherals to be connected. -- Vista and Internet Explorer will warn users when a Web site attempts to install dangerous code. -- An antiphishing site, updated hourly, will warn users of e-mail messages that attempt to trick them into giving up their personal information. -- If a user manages to download malware, the Windows Defender security software is designed to block it from doing damage. -- The Enterprise and Ultimate versions of Vista will allow users to encrypt hard drives. Vista's BitLocker Drive Encryption feature is an attempt to address continuing problems with data breaches, often caused by lost laptops, Veghte said. About 660,000 laptops were lost or stolen in the U.S. in 2006, he said, leading to a lot of stories about such incidents that "ended up on the front page" of major newspapers.
509769
News.com&#39;s John Borland lays out the issues with shelving Microsoft&#39;s insecure Internet Explorer with a non-MS brower, such as Firefox... The problem is that many Web developers create their sites so they
381863
Users who fear that their Windows XP software might be counterfeit could get free legitimate replacements from Microsoft under a scheme announced last week.
195221
Windows XP Service Pack 2 promises to raise the security bar for the sometimes beleaguered operating system. Unfortunately, one of the new features could be spoofed so that it reports misleading information
96346
New computer code that exploits a recently disclosed hole in Microsoft Corp.'s Internet Explorer Web browser is circulating on the Internet and could allow remote attackers to take full control of vulnerable Windows machines, according to warnings from antivirus companies and Internet security experts.
210968
com December 17, 2004, 11:40 AM PT. Microsoft is investigating reports of a new Internet Explorer flaw that puts people with the most secure version of Windows at risk of phishing attacks.
520483
New computer code that exploits a recently disclosed hole in Microsoft&#39;s Internet Explorer Web browser is circulating on the Internet and could allow remote attackers to take full control of vulnerable Windows machines, according to warnings from
465286
The software giant&#39;s much anticipated security-laden upgrade for the Windows XP operating system is finally available for installation.