Critical Internet Explorer Patch Available

In an unusual move, Microsoft has issued a patch for all versions of Internet Explorer from v5.5 onward and for all versions of the Windows operating system. Time to roll out that out-of-band patch before your users get infected. Reports of users being exploited are rising.According to the SANS Internet Storm Center, attackers started distributing the exploit code to Web sites using sql injection. ShadowServer.org, a group of volunteers that analyse malware and track botnet activity, among other things, has a list of infected sites, but the list may be incomplete. HD Moore of BreakingPoint Labs also has a thorough analysis of the live exploit.