Hackers find a hole in Internet Explorer browser

In an alarming development for both Microsoft and the millions who use its Internet Explorer browsers, hackers have found a security hole that allows them to install malicious software on Windows XP computers. Specifically, security researcher Eric Romang of Zataz.com discovered on Sunday that the fresh “zero day” vulnerability allowed cybercrooks to use a form of the old Poison Ivy trojan horse to take control of victims’ machines. The flaw appears to affect Internet Explorer versions 6, 7, 8, and 9, though not the brand-new version 10 (which is only available on Windows 8). It seems the culprits may be related to the bunch who exploited a major flaw in Oracle’s Java browser plug-in last month.

When news of the Java vulnerability broke, security experts’ advice was clear-cut: Disable the Java browser plug-in immediately unless you absolutely need it. The fact that Java applets have grown relatively scarce on the Web, coupled with Oracle’s sluggish response to the problem, made that an easy call for most. (Java has since patched the hole, for what it’s worth.)

So if you’re a Windows XP user, should you now dump Internet Explorer as well? Perhaps, experts say, though the hack shouldn’t be a cause for mass panic. For one thing, Microsoft itself has responded quickly with a security advisory that includes an extensive list of work-arounds. Its apparent sense of urgency suggests that it may offer a prompt update that patches the problem, though it hasn’t done so yet.

Unfortunately for Microsoft, the work-arounds are a bit cumbersome and could affect your browsing experience – potentially more so than just switching to another browser. And while IE loyalists could just try to avoid potentially malicious websites and hope for the best, you never know. “I would recommend not using Internet Explorer until this issue is patched,” Sophos’ Chet Wisniewksi says. “While the exploit is not in widespread use, it could be integrated into popular attack kits like the Blackhole Exploit Kit any time now.”

For those who were already thinking of switching to another browser, such as Google’s super-fast Chrome, Mozilla’s highly customizable Firefox, or Opera, consider this the perfect time. If you don’t like it, you can come back to IE once Microsoft fixes this flaw.

bc-hackers

Talk to us

More in Herald Business Journal

Members of Gravitics' team and U.S. Rep. Rick Larsen stand in front of a mockup of a space module interior on Thursday, August 17, 2023 at Gravitics' Marysville facility. Left to right: Mark Tiner, government affairs representative; Jiral Shah, business development; U.S. Rep. Rick Larsen; Mike DeRosa, marketing; Scott Macklin, lead engineer. (Gravitics.)
Marysville startup prepares for space — the financial frontier

Gravitics is building space station module prototypes to one day house space travelers and researchers.

Orca Mobility designer Mike Lowell, left, and CEO Bill Messing at their office on Wednesday, Aug. 16, 2023 in Granite Falls, Washington. (Olivia Vanni / The Herald)
Could a Granite Falls startup’s three-wheeler revolutionize delivery?

Orca Mobility’s battery-powered, three-wheel truck is built on a motorcycle frame. Now, they aim to make it self-driving.

Catherine Robinweiler leads the class during a lab session at Edmonds College on April 29, 2021. (Kevin Clark / The Herald)
Grant aids apprenticeship program in Mukilteo and elsewhere

A $5.6 million U.S. Department of Labor grant will boost apprenticeships for special education teachers and nurses.

Peoples Bank is placing piggy banks with $30 around Washington starting Aug. 1.
(Peoples Bank)
Peoples Bank grant program seeks proposals from nonprofits

Peoples Bank offers up to $35,000 in Impact Grants aimed at helping communities. Applications due Sept. 15.

Workers build the first all-electric commuter plane, the Eviation Alice, at Eviation's plant on Wednesday, Sept. 8, 2021 in Arlington, Washington.  (Andy Bronson / The Herald)
Arlington’s Eviation selects Seattle firm to configure production plane

TLG Aerospace chosen to configure Eviation Aircraft’s all-electric commuter plane for mass production.

Jim Simpson leans on Blue Ray III, one of his designs, in his shop on Friday, August 25, 2023, in Clinton, Washington. (Ryan Berry / The Herald)
Whidbey Island master mechanic building dream car from “Speed Racer”

Jim Simpson, 68, of Clinton, is using his knowledge of sports cars to assemble his own Mach Five.

An Amazon worker transfers and organizes items at the new PAE2 Amazon Fulfillment Center on Thursday, Sept. 14, 2023, in Arlington, Washington. (Ryan Berry / The Herald)
Amazon cuts ribbon on colossal $355M fulfillment center in Arlington

At 2.8 million square feet, the facility is the largest of its kind in Washington. It can hold 40 million “units” of inventory.

A computer rendering of the North Creek Commerce Center industrial park in development at 18712 Bothell-Everett Highway. (Kidder Mathews)
Developer breaks ground on new Bothell industrial park

The North Creek Commerce Center on Bothell Everett Highway will provide warehouse and office space in three buildings.

Dan Bates / The Herald
Funko president, Brian Mariotti is excited about the growth that has led his company to need a 62,000 square foot facility in Lynnwood.
Photo Taken: 102312
Former Funko CEO resigns from the Everett company

Brian Mariotti resigned Sept. 1, six weeks after announcing he was taking a six-month sabbatical from the company.

Cash is used for a purchase at Molly Moon's Ice Cream in Edmonds, Washington on Wednesday, Aug. 30, 2023. (Annie Barker / The Herald)
Paper or plastic? Snohomish County may require businesses to take cash

County Council member Nate Nehring proposed an ordinance to ban cashless sales under $200. He hopes cities will follow suit.

A crowd begins to form before a large reception for the opening of Fisherman Jack’s at the Port of Everett on Wednesday, August 30, 2023, in Everett, Washington. (Ryan Berry / The Herald)
Seafood with a view: Fisherman Jack’s opens at Port of Everett

“The port is booming!” The new restaurant is the first to open on “restaurant row” at the port’s Waterfront Place.

Tanner Mock begins unwrapping new furniture that has been delivered on Thursday, Aug. 24, 2023 in Everett, Washington. (Olivia Vanni / The Herald)
In Everett, new look, new name for mainstay Behar’s Furniture

Conlin’s Furniture, based in South Dakota, bought the huge store and celebrates with a grand opening this week.