Cyber risk and advisory programs that identify security gaps and build strategies to address them.
MDR that provides improved detection, 24/7 threat hunting, end-to-end coverage and most of all, complete Response.
Our team delivers the fastest response time in the industry. Threat suppression within just 4 hours of being engaged.
Be protected by the best from Day 1.
24/7 Threat Investigation and Response.
Expert hunting, research and content.
Defend brute force attacks, active intrusions and unauthorized scans.
Protect assets from ransomware, trojans, rootkits and more.
Intelligence and visibility across AWS, O365, DevOps and more.
Configuration escalations, policy and posture management.
Detects malicious insider behavior leveraging Machine Learning models.
Microsoft has released an out-of-band patch for a zero-day vulnerability affecting the Internet Explorer web browser. CVE-2018-8653 is a memory corruption vulnerability that could allow remote attackers to execute arbitrary code on affected systems. Microsoft has reported active exploitation of this vulnerability in the wild. Organizations are encouraged to apply the patch released by Microsoft as soon as possible.
Update the Internet Explorer browser to the most recent version [1]
When successfully exploited, CVE-2018-8653 allows remote code in the context of the current user.
Potential attacks may include malicious webpages delivered through email, social engineering or other redirection methods which result in malicious content rendered in vulnerable versions of Internet Explorer.
Internet Explorer versions 9, 10 & 11 are affected [2].
Resources:
[1] CVE-2018-8653 | Scripting Engine Memory Corruption Vulnerability
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8653
[2] NATIONAL VULNERABILITY DATABASE, CVE-2018-8653 Detail
https://nvd.nist.gov/vuln/detail/CVE-2018-8653
First Published: 20 December 2018
Last Updated: 24 December 2018