April 28, 2014, 12:59 PM — In case you missed it: Microsoft issued a security alert over the weekend warning there's a vunerability in Internet Explorer (from IE 6 through IE 11) that could let a hacker remotely execute malicious code on your computer. While Microsoft rushes to patch this, it's best to avoid using that browser.
Here's Microsoft's explanation of the vulnerability:
The vulnerability is a remote code execution vulnerability. The vulnerability exists in the way that Internet Explorer accesses an object in memory that has been deleted or has not been properly allocated. The vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer. An attacker could host a specially crafted website that is designed to exploit this vulnerability through Internet Explorer and then convince a user to view the website.
If you're careful about which sites you visit and links you click on, you don't have to be very alarmed, since that mitigates the threat.
However, the sad thing is, many people who are still clutching to Windows XP (and also probably using Internet Explorer) likely won't get the patch for this zero day vunerability, because Windows XP is dead, at least in terms of official updates from Microsoft.
If you know of anyone who's possibly using Internet Explorer, do them a favor and pass along this information to them.
For more information and updates about this vunerability, check out this page on the Cert database.
Read more of Melanie Pinola’s Tech IT Out blog and follow the latest IT news at ITworld. Follow Melanie on Twitter at @melaniepinola. For the latest IT news, analysis and how-tos, follow ITworld on Twitter and Facebook.