Microsoft preps emergency IE patch for Wednesday release

http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9123612&intsrc=hm_list

December 16, 2008 (Computerworld) Microsoft Corp. announced today that it will issue an emergency patch tomorrow to quash a critical Internet Explorer bug that attackers have been exploiting for more than a week.

The advance warning came less than a week after Microsoft acknowledged that exploit code had gone public and was being used by hackers to hijack Windows PCs running IE.

Microsoft will deliver the out-of-cycle patch Wednesday at 1 p.m. Eastern time via its normal update mechanisms, including Windows Update, Microsoft Update and Windows Server Update Services (WSUS).

The update will be pegged "critical," the most serious ranking in Microsoft's four-step scoring system.

Even as it declared that it would release an emergency fix, Microsoft continued to downplay the threat. "At this time, we are aware only of attacks that attempt to use this vulnerability against Windows Internet Explorer 7," said company spokesman Christopher Budd in an e-mail today.

Initially, Microsoft and other security companies believed that only IE7 was vulnerable to attack, but on review, the company confirmed that all versions of its browser, including IE5.01, IE6 and IE8 Beta 2, contain the bug.

Last weekend, Microsoft researchers said that they had seen a "huge increase" in attacks, and that some were originating from legitimate Web sites. Another researcher added that about 6,000 infected sites were serving up exploits that target the IE vulnerability.

Also today, Microsoft confirmed that attacks could be launched through Outlook Express, a free e-mail client bundled with Windows XP. Because Outlook Express renders HTML-based messages using IE's engine, attackers could exploit the bug by getting users to open or view malicious messages.

This will be the second out-of-cycle patch from Microsoft in the last two months. In late October, it issued an emergency fix for a critical vulnerability in the Windows Server service; like IE's bug, that one had been actively exploited before Microsoft was able to come up with a patch.

According to today's advance notification, Microsoft will provide patches to users of Windows 2000, XP, Vista, Server 2003 and Server 2008 for IE5.01, IE6 and IE7. A separate patch will apparently be issued tomorrow for IE8 Beta 2, a preview version of Microsoft's next browser that is not officially on the support list.

Transportation recruitment portal

Yet another interesting site by employment crossing for people specifically looking for transportation, distribution or logistics jobs - http://www.transportationcrossing.com/
Though I am not sure about the logic behind creating various portals for various kind of jobs, however it seems like they are trying to create dedicated channels for different kind of jobs and making it easier for people to find what they are looking for.
It has over a million job openings posted already and the overall site quality seems nice. I would like to recommend everyone to try it out if they are looking for career in transportation, supply chain management, logistics or distribution.

For people looking for a career in science field - www.sciencescrossing.com

Here is yet another interesting website for people looking for a career in science world -
www.sciencescrossing.com
This is a website by http://www.employmentcrossing.com/ which has over million of openings in all areas. A few of the salient points for www.sciencescrossing.com are -

• A comprehensive collection of over 1 million researched job openings
• Job openings from all Fortune 500 companies
• Job openings from virtually every employer career webpage in America
• Job openings from virtually every job board in America
• More than 500 highly trained job-opening research analysts reviewing jobs

I have already joined this site and am waiting for my access instructions! What are you waiting for??

For people searching for SAP jobs

Here is very useful site for people searching for SAP job openings - www.sapcrossing.com
There are a bunch of "jobs and job openings" and you may do you "job search" through this very useful site.

A list of more websites to follow