Microsoft has confirmed a security flaw affecting Internet Explorer is currently being used by hackers, but that it has no immediate plans to fix.
In a late-evening tweet, US-CERT, the division of Homeland Security tasked with reporting on major security flaws, tweeted a link to a security advisory detailing the bug, describing it as “being exploited in the wild.”
Microsoft said all supported versions of Windows are affected by the flaw, including Windows 7, which after this week no longer receives security updates.
The vulnerability was found in how Internet Explorer handles memory. An attacker could use the flaw to remotely run malicious code on an affected computer, such as tricking a user into opening a malicious website from a search query or a link sent by email.
It’s believed to be a similar vulnerability as one disclosed by Mozilla, the maker of the Firefox browser, earlier this week. Both Microsoft and Mozilla credited Qihoo 360, a China-based security research team, with finding flaws under active attack. Earlier in the week, Qihoo 360 reportedly deleted a tweet referencing a similar flaw in Internet Explorer.
Neither Qihoo, Microsoft, nor Mozilla said how attackers were exploiting the bug, who the attackers were, or who was being targeted. The U.S. government’s cybersecurity advisory unit also issued a warning about current exploitation.
Microsoft told TechCrunch that it was was “aware of limited targeted attacks” and was “working on a fix,” but that it was unlikely to release a patch until its next round of monthly security fixes — scheduled for February 11.
Microsoft assigned the bug with a common vulnerability identifier, CVE-2020-0674, but specific details of the bug have yet to be released.
When reached, a Microsoft spokesperson did not comment.
- Another shield, a safer Internet for minors – OneNewsNow
- What’s the future of the internet — and society? – Technical.ly
- Astranis raises $90 million for its next-gen satellite broadband internet service – TechCrunch
- ‘Sonic the Hedgehog’ proves the internet wrong – Houston Chronicle
- Gov. Mills: high-speed internet is no longer a luxury, it is a necessity – Knox VillageSoup – Courier-Gazette & Camden Herald
- New Report Finds Internet Users Overwhelmed by Identity Theft Worries – Yahoo Finance
- Never Mind the Internet. Here’s What’s Killing Malls. – The New York Times
- China to relax its internet restrictions for 100,000 students hit by Australia’s coronavirus travel ban – The Guardian
- Quarantine and chill? The internet is giving quarantined people a social outlet – Salon