IE

Internet Explorer sends its regards: a vulnerability in the HTTP protocol extension allows attackers to run malicious code — even on a modern operating system.

Exploitation of vulnerability CVE-2024-43451 allows an attacker to steal an NTLMv2 hash with minimal interaction from the victim.

Microsoft dropped security support for Internet Explorer versions 8, 9, and 10 on some Microsoft platforms last week. It wasn’t sudden. There was time to get rid of it. Unfortunately, it wasn’t so easy to accomplish.

Microsoft Internet Explorer and Adobe Flash Player zero-days replace OpenSSL Heartbleed as the primary topic of discussion in this week’s security news.