[x]Blackmoor Vituperative

Monday, 2006-11-06

For pete’s sake, disable ActiveX!

Filed under: Security — bblackmoor @ 12:07

The US Department of Homeland Security has warned that attackers are exploiting an unpatched flaw in Windows to compromise systems via malicious websites.

Microsoft on Friday said it was investigating reports of a newly discovered, unpatched bug in the XMLHTTP 4.0 ActiveX control, which it confirmed was being exploited on malicious sites. The bug has the potential to infect a large number of systems. Since it doesn’t require any user interaction, a user must merely use Internet Explorer to visit a site containing the exploit.

(from TechWorld, Windows hit by zero-day flaw)

Does a house have to fall on you people for you to get the message?

  1. Don’t use Internet Explorer!
  2. Don’t use or enable ActiveX!