SECURITY RESEARCHERS HAVE WARNED of a new zero-day vulnerability in Microsoft's Internet Explorer 11 affecting Windows 7 and Windows 8.1 users.
The flaw was
found by researcher David Leo at Deusen and is described as a "universal cross-site scripting" attack allowing content on domains to be changed remotely using modified browser cookies.
The flaw could also allow hackers to insert malicious content into browsers, scrape personal data or track movements online using unsavoury web pages as a mask.
Leo
used the example of the Daily Mail website and how the content can be changed by external domain.