http://www.msnbc.msn.com/id/28242570/<

Basically, don't visit sites you don't trust.<

Or just do a search :)

http://blogs.technet.com/swi/archive/2008/12/12/Clarification-on-the-various-workarounds-from-the-recent-IE-advisory.aspx

Or simply upgrade to IE8 effective immidiately...
<

IE8 is still far from ready for general release, it still has some serious issues which have not been resolved.<

Or you can just use Vista UAC with IE7 in protected mode. In other words default setup of Vista.
Anyway, I've never seen so much detailed information on Microsoft site about a security that big before. May be it may help people get rid of IE6 soon enough.<

Originally posted by RichardKinser
Basically, don't visit sites you don't trust.

Well, there's a problem even with sites you may trust : they may be subject to infection as well. A while ago we had a similar 'outbreak', where people where infected through the official Asus website. (link)
My own sites running on Apache hosting were infected a while ago, through a root-access hack at my provider. I was not alarmed until a friend of mine tipped me to check for additional FTP accounts. They left the entire site intact, but injected hidden iframes and javascript stuff in tons of pages. So, even sites you trust may be hazardous to visit using an insecure browser.
I currently refuse to use IE, and use Firefox 3 instead. Too bad I cannot use that approach here at work, as they've implemented several IE only webapplications....<

Originally posted by MarcelG
I currently refuse to use IE, and use Firefox 3 instead. Too bad I cannot use that approach here at work, as they've implemented several IE only webapplications....

Just opposite here, Malwares are not "browser" specific. What happened at you is Malware which is used to create Botnets. Beside I refuse to use a browser claiming most secure while having found triple critical security flaws than it's IE equivalent in just a year with 14 "new versions" to fix it. <

Just opposite here, Malwares are not "browser" specific. What happened at you is Malware which is used to create Botnets. Beside I refuse to use a browser claiming most secure while having found triple critical security flaws than it's IE equivalent in just a year with 14 "new versions" to fix it.

Then try opera, or safari or even google chrome. At least until ms finds a fix or fixes it.<

time to boot up the mac?<

Originally posted by MaD2ko0l
time to boot up the mac?

Or use SandboxIE, or surf via a VM you can toss out if it gets hosed, or do any of a number of things.
The long and the short is that all OSs and all browsers have security holes. Period.
And the biggest one is sometimes PEBKAC.<

I currently refuse to use IE, and use Firefox 3 instead. Too bad I cannot use that approach here at work, as they've implemented several IE only webapplications....

why not? use FF to surf the web and IE to access your work sites<

Kind of OT, but speaking of FF, anyone but me having intermittent 'connection interrupted, try again' issues with Firefox 3? I see this even on a LAN web server once in a while, I used FF2 for a year or so and never had the problem. I don't know if I did something else that causes the dropped connection or if the FF3 upgrade did it, but I started noticing the problem within a few days of the FF update.
<

Just opposite here, Malwares are not "browser" specific. What happened at you is Malware which is used to create Botnets. Beside I refuse to use a browser claiming most secure while having found triple critical security flaws than it's IE equivalent in just a year with 14 "new versions" to fix it.

Then try opera, or safari or even google chrome. At least until ms finds a fix or fixes it.
Beat me to it, I was about to say use Opera! I switched quite a few years back when I had a choice between Opera and FF as an alternative to IE, not only is it (arguably) more secure than both FF and IE, in my opinion, the layout is far easier to use and far nicer with all the built in functionality of IE & FF and more (BT, mail, Haute Secure to list a few, and I couldn't live without the address bar drop down, even though it's not default in Opera anymore)

Yes, I'm gunning for a job in the promotions department at Opera [^]<

fix to be available on Wednesday:

http://news.yahoo.com/s/pcworld/20081216/tc_pcworld/microsoftissuesemergencysecuritypatchforie_1

Getting the Patch
Microsoft's emergency security patch will become available Wednesday at 1 p.m. EST at the Microsoft Update site as well as at the Microsoft Download Center. All users of IE5, 6, and 7 are advised to install it. A separate patch is expected to be made available for users of IE8 Beta 2. Expect to see far more detail by midday Wednesday when Microsoft officially issues its security bulletin.

<

Originally posted by Jezmeister not only is it (arguably) more secure than both FF and IE, in my opinion...

Indeed arguable...
Problem all lies in "Popularity"... More popular you are, more insecure you are... Firefox post-20% usage, now suffers from insecurity issues. Hackers etc. always gets interested for popular things to effect more masses. Check it out: http://www.bit9.com/news-events/press-release-details.php?id=102

And don't get me started about Apple and Adobe...
PS: Richard pointed out, don't forget your patches today even if you don't use IE :)<

Fix is out... Download it :)<