September, 2012

Today we released Security Update MS12-063 to address limited attacks against a small number of computers through a vulnerability in Internet Explorer versions 9 and earlier. We also released an update that addresses vulnerabilities in Adobe Flash Player in Internet Explorer 10 on Windows 8. The majority of customers have automatic updates enabled and will not need to take any action because protections will be downloaded and installed automatically. For those manually updating, we...

As far back as 2005, cross-site scripting (XSS) was recognized as the most commonly reported type of software vulnerability. A more recent study by Veracode using data from the Web Hacking Incident Database shows that XSS is the most prevalent vulnerability in Web applications and the second most likely to be leveraged in real-world attacks . Chart courtesy of Veracode; used by permission Data from the Microsoft Security Response Center (MSRC) demonstrates the growth...

Today, the W3C has accepted and published Microsoft’s member submission describing a new way for Web sites to support multiple pointing devices such as mouse, pen, and multi-touch. Our proposal for a new Pointer Events Web standard is based on the APIs available today in IE10 on Windows 8. The Web is more exciting and interactive for users when sites enable experiences for multi-touch. It is even better when the same site continues to work if you switch to using a mouse or pen. We believe...