Microsoft Admits Zero-Day Aided Google Attackers
Jan 15, 2010, 02:21 (7 Talkback[s])
(Other stories by Stuart J. Johnston)
WEBINAR: On-demand Event
Replace Oracle with the NoSQL Engagement Database: Why and how leading companies are making the switch REGISTER >
"Microsoft officials acknowledged that widely publicized attacks
on Google and perhaps another 20 or more corporations were helped
by a previously unknown zero-day (define) vulnerability in most
versions of its popular browser.
"Thursday, Microsoft (NASDAQ: MSFT) released a Security
Advisory, warning customers of the Internet Explorer breach and
providing workarounds that basically call for cranking security in
the browser up to 11.
""Based upon our investigations, we have determined that
Internet Explorer was one of the vectors used in targeted and
sophisticated attacks against Google (NASDAQ: GOOG) and possibly
some 20 other corporate networks," a post on the Microsoft Security
Response Center blog said."