IE flaw remains unpatched
ENT News | at | by Mike
The third installment of Microsoft's monthly patch roundups came and went last week with three new security bulletins but without a fix for a well-known Internet Explorer vulnerability.
Microsoft is aware of a major problem in Internet Explorer that involves spoofed Web site addresses and provides the technical foundation for several so-called phishing scams. These scams involve an e-mail instructing a user to "re-enter" or otherwise divulge banking, credit card information or personal financial information. Some phishing scams in wide circulation use spoofed e-mail addresses that make it appear that users are being sent to sites of legitimate institutions such as Barclays or Citibank.