Exploit found in Internet Explorer 8; IE9 and 10 not affected

[McLovin]

If you still use Windows XP and Internet Explorer 8, you might want to consider upgrading to a new OS and a new version of Microsoft's web browser. A cyber attack has apparently revealed that there is an exploit that affects IE8.

According to the blog of the FireEye software security firm, the website of the Council on Foreign Relations was the subject of a cyber attack earlier this week that caused the site to host malicious content. The blog adds:

We can also confirm that the malicious content hosted on the website does appear to use Adobe Flash to generate a heap spray attack against Internet Explorer version 8.0 (fully patched), which was the source of the zero-day vulnerability.

Read more.