Microsoft Issues Emergency 'Fix-It' for Browser Flaw

Microsoft has issued a "Fix it," or temporary workaround, for Internet Explorer 8 that lessens a previously unknown software or "zero day" flaw used to spy on U.S. atomic researchers.

The " Fix it " partly patches the security flaw that hackers, possibly working for a foreign government, used in a "watering hole" attack, one that corrupts a website of interest to a specific group of people.

Malware exploiting the flaw was embedded in a Department of Labor Web page concerning healthcare provisions for federal employees working at nuclear-research facilities.

That guaranteed that targeted employees using IE 8 would become infected with the "Poison Ivy" Trojan, which opens a "backdoor" that lets in other malware.

[ 8 Simple Tips for Securing Your Computer ]

In a blog posting, Microsoft said it was working "around-the-clock" on a more comprehensive security update, but advised all eligible IE 8 users to install the Fix it in the meantime.

It's unlikely that the permanent fix will be part of next week's scheduled Patch Tuesday round of Microsoft updates.

On Sophos' Naked Security blog, reporter Paul Ducklin noted that although the Fix it makes it harder for hackers to leverage an attack, the solution isn't perfect and could potentially be finessed to execute a remote code exploit that could infect victims via drive-by download.

For Subscribers

FOR SUBSCRIBERSAbdul El-Sayed tries to woo MAHA voters as Democrats seek inroads with RFK’s supporters

FOR SUBSCRIBERSKratom-like substances are popping up in a typically benign supplement

FOR SUBSCRIBERSGOP super PAC increases its spending for Sen. Jon Husted in tough Ohio race

FOR SUBSCRIBERSRecords reveal tumultuous marriage between slain New York Times executive and wife

FOR SUBSCRIBERSFrom clean energy warrior to ‘wall of shame,’ James Talarico reverses on a fossil fuel money pledge

FOR SUBSCRIBERSCongressional staff planned official trip with luxury stops in Italy and France weeks before election

FOR SUBSCRIBERSA harrowing ordeal aboard an Israel-bound plane

FOR SUBSCRIBERSOpenAI CEO Sam Altman to skip congressional hearing on rogue AI agents

FOR SUBSCRIBERSKey DOJ lawyers departed Trump ‘grand conspiracy’ probe amid pressure to produce, source says

FOR SUBSCRIBERSTrump’s new AI chatbot often links to a site launched under Clinton 26 years ago

FOR SUBSCRIBERSAt MAHA summit, industry CEOs the movement once vilified take the stage

FOR SUBSCRIBERSThis Paralympian has two goals: Win medals and give away $500,000 to her teammates

FOR SUBSCRIBERSCornell rape allegation spotlights stringent New York state laws that have long drawn criticism

FOR SUBSCRIBERSThe debate over AI’s future rages on both coasts

FOR SUBSCRIBERSDecades-old march dispute reignites in Northern Ireland, threatening political crisis

For Subscribers

FOR SUBSCRIBERSAbdul El-Sayed tries to woo MAHA voters as Democrats seek inroads with RFK’s supporters

FOR SUBSCRIBERSKratom-like substances are popping up in a typically benign supplement

FOR SUBSCRIBERSGOP super PAC increases its spending for Sen. Jon Husted in tough Ohio race

FOR SUBSCRIBERSRecords reveal tumultuous marriage between slain New York Times executive and wife

FOR SUBSCRIBERSFrom clean energy warrior to ‘wall of shame,’ James Talarico reverses on a fossil fuel money pledge

FOR SUBSCRIBERSCongressional staff planned official trip with luxury stops in Italy and France weeks before election

FOR SUBSCRIBERSA harrowing ordeal aboard an Israel-bound plane

FOR SUBSCRIBERSOpenAI CEO Sam Altman to skip congressional hearing on rogue AI agents

FOR SUBSCRIBERSKey DOJ lawyers departed Trump ‘grand conspiracy’ probe amid pressure to produce, source says

FOR SUBSCRIBERSTrump’s new AI chatbot often links to a site launched under Clinton 26 years ago

FOR SUBSCRIBERSAt MAHA summit, industry CEOs the movement once vilified take the stage

FOR SUBSCRIBERSThis Paralympian has two goals: Win medals and give away $500,000 to her teammates

FOR SUBSCRIBERSCornell rape allegation spotlights stringent New York state laws that have long drawn criticism

FOR SUBSCRIBERSThe debate over AI’s future rages on both coasts

FOR SUBSCRIBERSDecades-old march dispute reignites in Northern Ireland, threatening political crisis

Furthermore, the Fix it only works on 32-bit versions of IE8 that have incorporated April's Patch Tuesday updates.

Since the flaw affects only Internet Explorer 8, users of Windows Vista, 7 or 8 can alternatively upgrade to IE 9 or 10. Windows XP users using IE 8 can switch to using non-Microsoft browsers, such as Google Chrome or Mozilla Firefox.

The bug has also been used to target European workers in the defense, aerospace and security industries. Computer-security firm AlienVault noted that the ongoing campaign is similar to a Chinese state-sponsored cyberespionage effort known as "DeepPanda."

Follow us , on  Facebook  or on . Originally published on TechNewsDaily.com.

• 7 Security Spring Cleaning Tips
• How 'Pixie Porn' Could Put You in Prison
• 10 Best Web Browsers