Threat Level: green Handler on Duty: Jim Clausing

SANS ISC: Internet Explorer 9 "Platform Preview" Now Available From Microsoft - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Internet Explorer 9 "Platform Preview" Now Available From Microsoft

Microsoft released a "Platform Preview" version of the next version of Internet Explorer. You can download it from http://ie.microsoft.com/testdrive/Default.html. There are several security implications of this release:

  1. Security professionals may be interested in exploring what security features and enhancements (if any) are built into Internet Explorer 9
  2. Attackers may be interested in exploring what vulnerabilities (if any) exist in the code added to Internet Explorer 9
  3. Attackers may start using the lure of installing Internet Explorer 9 as part of phishing and drive-by campaigns

Regarding point #3... At the moment, searching for "Internet Explorer 9" doesn't provide many links that look malicious. I suspect this will change as malicious sites using Search Engine Optimization (SEO) techniques will spring into action to take advantage of people's interest in the new browser.

Have you had a chance to look at Internet Explorer 9? Let us know your security-related observations.

-- Lenny

Lenny Zeltser - Security Consulting
Lenny teaches malware analysis at SANS Institute. You can find him on Twitter.

Lenny

216 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!