Information Age: News, analysis & insight for IT & business leaders

2 September 2010

Microsoft admits browser flaw was used in Google hack

15 January 2010  

Chinese hackers exploited Internet Explorer security flaw in theft of Google intellectual property, Microsoft confirms

Microsoft has confirmed that a co-ordinated attack by cybercriminals on Google used a security weakness found in its Internet Explorer browser.

The flaw was exploited by hackers – reportedly based in mainland China – to steal intellectual property from Google and reportedly more than 20 other Silicon Valley-based companies in mid-December.

Aside from Google, software developer Adobe is so far the only company to reveal that it was affected by last year’s attack. Earlier this month, Adobe released a critical security patch for both its Reader and Acrobat software, which has led to suggestions that both of these programs may have been compromised.

Mike Reavey, director of Microsoft Security Response Center, confirmed the vulnerability in an official blog post following claims from security software vendor McAfee. “We have determined that Internet Explorer was one of the vectors used in targeted and sophisticated attacks against Google and possibly other corporate networks,” he said. Reavey added that Microsoft is currently working on a patch to correct the problem, but gave no indication of when it will be made public.

According to Google, the intention of the December strike was for hackers to gain access to Gmail accounts held by a number of campaigners for human rights in China.

Meanwhile, Microsoft chief executive Steve Ballmer has reassured investors that the company has no intention of following Google’s example and withdrawing from the Chinese market.


Comments 

There are currently no comments on this article

People who read this also read...

US spy planes ‘hacked’ with off-the-shelf software

Iraqi insurgents intercepted Predator drone communications using $26 tool, according to report

Google ‘investigating’ employee involvement in cyber attack

Search engine giant probing possible inside help on December security breach, sources claim

IT assets 'to disappear' as cloud takes off

A fifth of enterprises will hold no IT assets by 2012 as cloud computing and mobile working practices become commonplace, Gartner predicts

Facebook and McAfee address Web 2.0 security

Social networking giant joins forces with anti-virus software vendor as it seeks to allay security concerns

Microsoft calls for government action on cloud security

US government must work with IT industry to enforce security of cloud computing, says Microsoft

 

White Papers

Read article

10 Steps to an Enterprise Mobility Strategy

Regain control of your enterprise mobility strategy with these ten steps.

Read article

12 Key Points to Consider When Selecting a Network Scanning Solution

Discover the 12 key points your company should consider before you evaluate and select a vulnerability assessment solution.

Read article

1Z0-040 Oracle Database 10G New Features for Administrators Practice Exam

Oracle 9i administrators can certify on Oracle 10G by passing this exam. The ExamForce 1Z0-040 Oracle Database 10G New Features for Administrators practice exam provides their unique triple testing mode to instantly set a baseline of your knowledge and focus your study where you need it most.

More
Advertisement