Windows XP
Upgrade to Internet Explorer 8 Now
If you have Windows XP or Vista and you're currently using Internet Explorer 6 or 7, you need to upgrade to 8 without delay.
There is a new vulnerability being exploited that only affects Internet Explorer 6 and 7. With support for those older versions coming to an end, it's important to upgrade to the latest version.
DirectShow Vulnerabilities
Users of Internet Explorer in Windows 2000 and XP are being targeted thanks to a Video Active X exploit in DirectShow that is allowing PCs to become compromised.
Many websites have been hacked with a malicious script that checks for the vulnerability and if you visit the website with Windows 2000 or XP and do not have the vulnerability patched, the site will attempt to re-route you to a malicious site that will silently download and execute a keylogging program.
In addition to this latest exploit is another vulnerability in DirectShow that has not been patched by Microsoft either and affects ALL browsers. Both vulnerabilities are dangerous and considered “drive by downloads“.
Patches for these exploits are not yet available via Windows Update but Microsoft has created Advisories for each and Workaround fixes that can be used in the meantime to mitigate your risk.
Windows XP SP3
Windows XP SP3 is currently available via Windows Update and Windows Download. It is expected to become available via Automatic Updates between June and July. SP3 includes more than 1,000 fixes. An update of that magnitude should only be done after creating a backup of your computer, just in case something goes wrong. I successfully upgraded all four of our PCs…