Be aware! There is a critical scripting flaw in Internet Explorer!

All users need to immediately update their IE browsers because cybersecurity researchers discovered a scripting engine flaw in it.
The vulnerability, known as CVE-2018-8653, affects the scripting engine in Microsoft’s Internet Explorer when it executes Visual Basic scripts (VBScript) and Microsoft’s version of Javascript. Hackers can use it in a specially constructed Web page, HTML document, PDF file, or Office document to execute malicious programs.

Be aware, affected is any application that supports embedding Internet Explorer or its scripting engine component/
This is the third time in a year when Microsoft had to fix a serious flaw outside of its month scheduled problematic updates. In January 2018, the company patched its code to support firmware updates needed to secure computers against Meltdown and Spectre processor flaws (CVE-2017-5753 and others). In March, Microsoft patched a kernel vulnerability (CVE-2018-1038) and in May, the company issued an update for a vulnerability (CVE-2018-8115) in Windows containers.

Remember everything can be hacked. In order to stay away from any threats related to the cyber world, we recommend the install of antivirus for Windows or antivirus for Mac on every device that you own, depending on which OS your device is running. If you are a company, it is also recommended to hire every year a specialized cybersecurity company that will run annual tests on your company’s network. These tests include penetration testing and ethical hacking tests;

Researchers showed that In a web-based attack scenario, a hacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website, for example, by sending an email.

Microsoft did not provide any other explanation, but a spokesperson did issue a comment: “We addressed CVE-2018-8653 and customers who have Windows Update enabled and have applied the latest security updates, are protected automatically,”

In the past hackers have often used Office documents with malicious VBScripts to infect systems and get past malware scanners, so update immediately and proceed with caution when entering the cyberspace. Never go unprotected!
Good news is that Microsoft issued a critical patch for this remote-code execution vulnerability in its Malware Protection Engine, which scans files for potentially malicious code.

Keep in mind that our modern society is dependent on computers, mobile devices, and the use of the internet always stay safe and secured.
We will continue to monitor this cybersecurity problem. Meanwhile, users should keep a keen eye out for any cyber attacks. Remember to use an antivirus for Windows or antivirus for Mac in every device that you own, depending on which OS your machine is running, If you are a company we recommend to hire every year a specialized cybersecurity company that will run annual tests on your company’s network, tests like this include: penetration testing and ethical hacking.