0-days are here again [update]

In follow-up to our previous post regarding the 0-day vulnerability discovered in Microsoft’s Internet Explorer (MS12-063, Advisory: 2757760), Solutionary is pleased to advise you that the vendor has released a patch release (KB2744842).

Considering the large volume of reports that this has been actively exploited, Solutionary advises that organizations consider immediate testing (in accordance with good practice to ensure production systems are not adversely affected) followed by subsequent deployment. Solutionary advises these measures in addition to rigorous patch management and antivirus signature maintenance. Such strategies are also most effective when combined with thorough Incident Response Planning and continual user education on how to recognize and handle potentially malicious spam and other such methods aimed to redirect a victim to malicious web content.

See how Solutionary managed security services based on the patented ActiveGuard® service platform combine security intelligence and expertise to provide visibility, threat detection and event response.