This unusual security hole in IE has exposed millions of users the have their computers hijacked, allowing the hackers the ability to steer their victims to infected Web sites. This flaw in Internet Explorer’s programming code is rare and extremely dangerous in that users do not have to download anything for their computers to get infected.
As many as 10,000 sites have been compromised since last week. Criminals have loaded malicious code onto those sites that automatically infect visitors’ machines if they are using Internet Explorer.
Currently, Microsoft is suggesting a complicated series of workarounds to avert the hacker’s code and plans to have a security update available today. In the meantime security experts suggest switching to an alternative browser for Windows such as Firefox or Google Chrome until Microsoft releases a patch for the vulnerability.
*Update: The security patch has been released. You can learn more here.
Security fixes for Microsoft’s browser software are rare outside of its regular monthly updates. Previous fixes were last issued in October, and then a year and half before that.
For more information see Microsoft Security Advisory (961051)