When Microsoft released the highly-publicized patch for Internet Explorer yesterday, the software giant admitted that it was aware of the flaw for quite some time. "As part of that investigation, we also determined that the vulnerability was the same as a vulnerability responsibly reported to us and confirmed in early September," Redmond disclosed on the Microsoft Security Response Center. Does this mean that Microsoft could have prevented the Chinese attacks on the 33 companies by releasing patches for Internet Explorer sooner, or at the very least, that the browser would not have been one of the vectors used? Not exactly, we learned after contacting three different security experts.
|