Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

IE 8: Its Security Is Worth the Download

Microsoft released Internet Explorer 8 in March, and whether to install it is likely your biggest up­­date decision right now.

The browser has plenty of new security features, such as expanded phishing-site blocking of known malware distributors. IE 8 also highlights the domain name in the URLs you visit, making it easier to recognize a phishing scam.

New as well are a private browsing mode (called InPrivate Browsing) and behind-the-scenes tuning to help neutralize attack code on poisoned Web sites. Read more on IE 8's enhanced security.

Of course, downloading IE 8 isn't a silver bullet, but from a security standpoint the upgrade is a no-brainer. However, the new browser may not display all sites correctly-even in its compatibility (with IE 7) mode. If IE 8 can't handle a site you need to view, you can uninstall it (via Add or Remove Programs) and revert to the earlier browser.

Firefox, Opera Fixes

Firefox 3.0.8 closes two security holes that could allow an attacker to use a poisoned Web site to take over a PC. Make sure you have the latest security plugs by clicking Help, Check for Updates, or by visiting getfirefox.com, and get more info on the flaws.

The new Opera 9.64 fixes a number of problems, including one critical hole that viewing a specially crafted JPEG image could open. Another fix closes a risk of browser plug-ins launching data-stealing cross-domain-scripting attacks. See the full list of changes. Click Help, Check for Updates to make sure you have the latest Opera version; if you don't, you must download and manually install the new version--an annoyance, but a worthwhile one.

Microsoft has fixed a similar flaw in Windows. Viewing a malicious Windows Metafile (WMF) or En­­hanced Metafile (EMF) image on a Web site or in an HTML e-mail could have let a bad guy run any command on a PC--a critical risk for Windows Vista, XP, 2000, Server 2003, and Server 2008. Get the fix via Automatic Up­­dates or download it.

Adobe, Too

Crooks have actively targeted a hole in Adobe Reader and Acrobat that victims can trigger by opening a malicious .pdf file distributed as an e-mail attachment.

Reader 9.1 and Acrobat 9.1 fix the hole; updates for the Windows, Macintosh, and Unix versions of the software are available. Adobe also released updates for those stuck with older versions of the software-Acrobat and Reader version 8.1.4 and 7.1.1 contain the fix. Click the usual Help, Check for Updates, or download from Adobe.

Foxit Reader, an alternative program for handling .pdf files, has its own vulnerabilities to malicious files. Version 3 users can pick up the patched Build 1506, and those on version 2.3 can get Build 3902, by clicking Help, Check for Updates Now, or by clicking here for the download.

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: Adobe, AMP, Foxit Software, INS, Microsoft, VIA
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: ie8, internet explorer, security
Latest Blog Posts
Whitepapers
  • Case Study: Keeping information on the move: Clearswift protects Maman, the logistics experts
    Time is money. Every minute a consignment is held up in transit costs money and causes problems. Web and email are mission critical business tools that enable Maman, and their customers, to efficiently collaborate with partners across the globe. Spam, and other web based threats can result in delays that ultimately lead to missed deadlines - keeping the lines of communication open is therefore a key priority for Maman. Read on.
    Learn more »
  • Blurring boundaries: The disappearing gap between work and home life
    Call it multi-tasking, life-splicing or bleisure but increasingly, fuelled by advances in technology, employees are blurring the boundaries between home and work. ‘Generation Standby’ employees, never truly ‘switched off’ and always ready to be called upon, are now enjoying, and expecting, greater levels of flexibility and mobility than ever before. Read on.
    Learn more »
  • Oracle Database 11g for Data Warehousing and Business Intelligence
    Oracle Database 11g is a comprehensive database platform for data warehousing and business intelligence that combines industry-leading scalability and performance, deeply integrated analytics, and embedded integration and data-quality -- all in a single platform running on a reliable, low-cost grid infrastructure. Read on.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments