IE7 phishing vulnerability found

It's official--Internet Explorer 7, released just last week, has its first vulnerability, which has been deemed "less critical" by a security vendor. According to Secunia, the flaw helps mask phishing attacks--a security weakness that Microsoft allegedly focused on fixing in the new version of its browser. It seems that IE7 allows a Web site to open a pop-up window which could entice users to click through to an external site where their confidential information or passwords are collected. Microsoft says it's working to fix the flaw. An earlier report of an IE flaw turned out to be a Outlook vulnerability instead.

For more on IE's first official security issue:
- read the news at News.com