While I was getting ready to post the previous article on why browsers are so vulnerable, researchers announced the discovery of three major zero-day exploits.
These were all found in the data that hackers recently took from the Italian security company “Hacking Team”, so they have probably been in use by law enforcement and others around the world for some time. These are all serious vulnerabilities which allow attackers to install malware and effectively take control of the user’s computer.
The continuing flood of new serious vulnerabilities in browsers, or their most popular plugins, demonstrates just why they simply can’t be trusted. The only safe browser is one that locked in a (virtual) vault from which malware can’t escape.