Connect with us

E-Business

Microsoft Warns of Internet Explorer Flaw

Published

on

microsoft logo.jpg
Kindly share this post

 

Microsoft has warned consumers that a vulnerability in its Internet Explorer browser could let hackers gain access and user rights to their computer.

The flaw affects Internet Explorer versions 6 to 11 and Microsoft said it was aware of “limited, targeted attacks” to exploit it.

According to NetMarket Share, the IE versions account for more than 50 per cent of global browser market.

Microsoft says it is investigating the flaw and will take “appropriate” steps.

The firm, which issued a security advisory over the weekend, said the steps “may include providing a solution through our monthly security update release process, or an out-of-cycle security update, depending on customer needs”.

However, the issue may be of special concern to people still using the Windows XP operating system.

That is because Microsoft ended official support for that system earlier this month.

It means there will be no more official security updates and bug fixes for XP from the firm.

Cyber security firm Symantec said it had carried out tests which confirmed that “the vulnerability crashes Internet Explorer on Windows XP”.

“This will be the first zero day vulnerability that will not be patched for Windows XP users,” it added.

About 30 per cent of all desktops are thought to be still running Windows XP and analysts have previously warned that those users would be vulnerable to attacks from cyber-thieves.

Microsoft has suggested businesses and consumers still using the system should upgrade to a newer alternative.

Microsoft said that hackers looking to exploit the flaw could host a “specially crafted website” containing content that can help them do so.

However, they would still need to convince users to view the website for them to be able to gain access to their computer.

They could do this by getting them to click on a link sent via an email or instant messenger, or by opening an attachment sent through an email.

However, a hacker would have “no way to force users” to view the content.

If successful, a hacker could gain the same rights as the computer’s current user.

“If the current user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system,” the firm warned.

“An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.”

But the firm added that Internet Explorer on Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode, which “mitigates this vulnerability”.\

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Attackers Target Employees with Fake HR Updates

Published

on

Kindly share this post

Kaspersky has identified an advanced phishing campaign targeting employees with personalised emails and attached documents disguised as HR policy updates.

This campaign marks a significant escalation in phishing tactics, with attackers tailoring not only the email body, but also the attachments by addressing individual recipients, showcasing an unprecedented level of customisation. The goal was to lure the victim into entering their corporate email credentials.

The attackers likely prepared by parsing employee names to make the campaign targeted and more convincing.

The emails feature a deceptive body: a fraudulent “verified sender” badge to build trust, the recipient’s name, and an invitation to open the attached file to review remote work protocols, benefits administration and security standards. However, the whole email body is in reality just an image with no real text in it; this is done to bypass email filters.

The attached document, posing as an updated “Employee Handbook,” does not contain any actual guidelines – only a title page, a table of contents with the items that have supposedly been changed highlighted in red, a page with a QR code, supposedly for going to the full document and common instructions on how to read QR codes using a phone. The document features the victim’s name multiple times to convince that this document was created specifically for them.

If the victim scans the QR code and follows the link, they land on a fraudulent page where they are asked to enter their corporate credentials, which is what the attackers are hunting for.

“This campaign demonstrates a new level of sophistication in phishing attacks, and we may be seeing a new mailing automation mechanism that generates a separate attached document and a separate image for the email body for each recipient.

“This tactic allows to scale the attack and at the same time possibly evade traditional defenses. Organisations must prioritise advanced security measures and employee education to stay ahead of these threats,” comments Roman Dedenok, Anti-Spam Expert at Kaspersky.

 


Kindly share this post
Continue Reading

E-Business

Temu Joins INTA to Combat Counterfeits and Elevate IP Standards Worldwide

Published

on

Kindly share this post

Temu, the global online marketplace, has joined the International Trademark Association (INTA) as a corporate member and serves on its Anti-Counterfeiting Committee.

INTA is a global association that brings together more than 6,700 organizations, representing over 37,000 trademark professionals and brand owners across 181 countries. By joining INTA, Temu deepens its commitment to building a trusted online marketplace and advancing global IP protection through broader, cross-industry collaboration.

“INTA welcomes TEMU’s willingness to engage in anticounterfeiting initiatives, including in the Association’s annual Anticounterfeiting Workshop and Online Takedown Certificate Program which serve to share best practices and connect stakeholders,” said Alastair Gray, Director of Anti-Counterfeiting, INTA. “Constructive collaboration with these efforts can contribute to the protection of intellectual property rights for INTA members and support the removal of counterfeit products from the platform which ultimately protects consumers.”

At the 2025 INTA Annual Meeting held in San Diego in May, Temu participated in the Anti-Counterfeiting Committee Roundtable, serving as a moderator to facilitate discussions among brand owners, online platforms, and government officials on emerging technologies, best practices for collaboration, and strategies to strengthen global anti-counterfeiting efforts.

“Joining INTA and serving on its Anti-Counterfeiting Committee reflects Temu’s ongoing commitment to ensuring a trustworthy online shopping experience,” said a Temu spokesperson. “We value collaboration with industry peers and stakeholders and are dedicated to advancing collective efforts in intellectual property protection.”

Temu also participates in INTA-led online workshops, including the Online Platform Notice and Takedown Certification Program, which outlines the latest procedures and best practices used by e-commerce platforms and social media companies. These workshops aim to enhance the quality and accuracy of rights-holder notices, promoting more effective takedown processes and content moderation.

Since launching in 2022, Temu has made significant investments in IP enforcement. Its measures include comprehensive seller vetting and compliance training, 24/7 algorithmic monitoring with manual review, a dedicated IP protection portal and brand registry to streamline takedown submissions, and an internal enforcement team that handles claims with speed and accuracy.


Kindly share this post
Continue Reading

E-Business

Huawei Unveils AI Computing System to Challenge Nvidia’s Flagship Product

Published

on

Kindly share this post

China’s Huawei Technologies unveiled an AI computing system on Saturday that an industry expert said rivals Nvidia’s most advanced product, as the company aims to expand its footprint in the country’s booming AI sector.

Huawei Unveils AI Computing System to Challenge Nvidia’s Flagship Product

The CloudMatrix 384 system made its public debut at the World Artificial Intelligence Conference (WAIC), a three-day event in Shanghai, attracting a large crowd to Huawei’s booth with its showcase of cutting-edge AI innovations.

The system has attracted significant interest from the global AI community since Huawei (HWT.UL) first introduced it in April. Industry analysts see it as a direct challenger to Nvidia’s GB200 NVL72, the most advanced system-level offering currently available from the U.S. chipmaker.

In an April article, Dylan Patel, founder of semiconductor research firm SemiAnalysis, stated that Huawei now possesses AI system capabilities that could surpass those of Nvidia.

Huawei staff at its WAIC booth declined to comment when asked to introduce the CloudMatrix 384 system.

A spokesperson for Huawei did not respond to questions.

Huawei has become widely regarded as China’s most promising domestic supplier of chips essential for AI development, even though the company faces U.S. export restrictions.

Nvidia CEO, Jensen Huang told Bloomberg in May that Huawei had been “moving quite fast” and named the CloudMatrix as an example.

The CloudMatrix 384 system features 384 of Huawei’s latest 910C chips and, according to SemiAnalysis, surpasses Nvidia’s GB200 NVL72 in certain performance metrics, despite the latter using 72 B200 chips.

SemiAnalysis attributes this performance advantage to Huawei’s strong system design, which offsets the lower power of individual chips by leveraging a greater number of them and incorporating system-level innovations.

Huawei describes the system as utilizing a “supernode” architecture that enables ultra-high-speed interconnectivity between chips.

In June, Zhang Pingan, CEO, Huawei Cloud confirmed that the CloudMatrix 384 was already operational on Huawei’s cloud platform.


Kindly share this post
Continue Reading

Trending