Security News > 2020 > January > It's Friday, the weekend has landed... and Microsoft warns of an Internet Explorer zero day exploited in the wild

Microsoft let slip on Friday an advisory detailing an under-attack zero-day vulnerability for Internet Explorer.
In brief... A poorly configured Elasticsearch database left an app's baby photos and videos accessible from the public internet.
A report out of Norway claims that dating app Grindr - and a handful of other mobile apps - are illegally exposing user information to third-party advertisers.
The report claims that a violation of GDPR has occurred in the way the apps collect user habits and then sell them to advertisers who use the information to create detailed profiles on users.
The Hill reports that an internal directive at the FBI instructs agents to make sure state governments get word any time a network intrusion is reported.
News URL
https://go.theregister.co.uk/feed/www.theregister.co.uk/2020/01/18/roundup_january_17/
Related news
- Microsoft April 2025 Patch Tuesday fixes exploited zero-day, 134 flaws (source)
- Microsoft: Windows CLFS zero-day exploited by ransomware gang (source)
- Microsoft fixes actively exploited Windows CLFS zero-day (CVE-2025-29824) (source)
- Patch Tuesday: Microsoft Fixes 134 Vulnerabilities, Including 1 Zero-Day (source)
- Microsoft May 2025 Patch Tuesday fixes 5 exploited zero-days, 72 flaws (source)
- Patch Tuesday: Microsoft fixes 5 actively exploited zero-days (source)
- Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server (source)
- Hackers exploit VMware ESXi, Microsoft SharePoint zero-days at Pwn2Own (source)