"At the present time, Microsoft is unaware of any attacks attempting to exploit this blended threat. Upon completion of this investigation, Microsoft will take the appropriate measures to protect our customers," according to a security advisory on Microsoft's Web site. "This may include providing a solution through a service pack, the monthly update process, or an out-of-cycle security update, depending on customers' needs."InfoWorld
CommentaryMicrosoft is warning Windows Vista and XP users of a blended threat involving Apple's Safari browser and its Internet Explorer browser.Turns out, if a Safari bug disclosed mid-May is exploited with a second unpatched bug in Microsoft's Internet Explorer browser, then hackers are able to run unauthorized software on a victim's computer. Separately, the bugs are considered moderate; in tandem, they are deemed critical and enable remote execution.
Safari, IE Bugs Pose Serious Blended Threat to Windows Users
- Developing an Effective Threat Intelligence Program for Your Enterprise
- 2021 DDoS Attack Trends: Year in Review
- Beyond Patch Management: Next-Generation Approaches to Finding and Fixing Vulnerable Code
- Cybersecurity Tech: Where It's Going and How To Get There
- Beyond Passwords: New Thinking and Strategies for Authentication