IMPORTANT SECURITY NOTICE: Stop using Internet Explorer immediately.

On Monday, April 28^th, 2014, Microsoft released Security Advisory 2963983 regarding an issue that impacts Internet Explorer. At this time, we are only aware of limited, targeted attacks. This security issue allows remote code execution if users visit a malicious website with an affected browser. This would typically occur by an attacker convincing someone to click a link in an email or instant message.

Microsoft’s initial investigation has revealed that Enhanced Protected Mode, on by default for the modern browsing experience in Internet Explorer 10 and Internet Explorer 11 will help protect against this potential risk. Microsoft also encourages users to follow the “Protect Your Computer” guidance of enabling a firewall, applying all software updates and installing anti-virus and anti-spyware software. Additionally, everyone should exercise caution when visiting websites and avoid clicking suspicious links, or opening email messages from unfamiliar senders. Additional information can be found at www.microsoft.com/protect.

Here is the vital information you need to know:

1. All versions of IE 6 through 11 for Windows are affected.
2. No patch is available as of today (4/28/14)

What To Do:

1. Do not use Microsoft's Internet Explorer on any machine you may currently have.
2. Use an alternative browser such as Firefox.
3. When the patch is issued, it will NOT apply to XP users!
4. If you are an XP User, you should use an alternative browser from here on out.
5. Think seriously about upgrading or replacing those Windows XP machines.

With the end of support for Windows XP earlier this month, we believe this is just the first of many attacks that will be targeting Windows XP.

If you have a question please contact us.
IES, Inc.
781-816-9437
contactus@iesadvisors.com

FBI issues cyber security advisory that could impact all users of Microsoft Explorer 8.

Better Business Bureau (BBB) is urging all consumers and businesses to pay close attention to a Cyber Security Advisory issued by the Federal Bureau of Investigation regarding a vulnerability in Microsoft’s Internet Explorer 8 browser (IE8) that could allow scammers to access and take over users’ computers. The risk for all users – home, business and government – is high, and BBB is urging anyone with IE8 to follow the recommended steps to address the problem.

The problem was first announced yesterday, and last night Microsoft released a temporary fix.
Here is the original overview from the FBI:

“A vulnerability has been discovered in Microsoft’s web browser, Internet Explorer, which could allow an attacker to take complete control of an affected system. Exploitation may occur if a user visits or is redirected to a web page which is specifically crafted to take advantage of the vulnerability. Successful exploitation of this vulnerability could result in an attacker gaining the same privileges as the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Failed exploit attempts may result in a denial-of-service condition.”

Microsoft today released a workaround which acts as a temporary fix. It is available at: https://support.microsoft.com/kb/2847140. The company is working on a patch to undo the vulnerability, which does not affect other versions of IE.

“BBB recommends that everyone with Internet Explorer 8 apply the temporary fix immediately,” said Ben Steinberg, Chief Information Officer of the Council of Better Business Bureaus. “If you are not sure which version you have, try running the fix. If you don’t have IE8, the fix will stop running and let you know that your system is not at risk. Microsoft will let you know when the patch is available, and you need to download that as soon as it is.”

For more details and the fix, go to: https://support.microsoft.com/kb/2847140.

Source: BBB