Microsoft responds to IE mouse monitoring vulnerability

Yesterday, there was a message that an important vulnerability exists in IE 6-10, allowing hackers to easily track the user's mouse movements, even if the IE window has been minimized.

Source Spider.io said that they reported the vulnerability to the Microsoft Security Research and Development Center on October 1, but Microsoft said it was impossible to complete the repair in a short time. They revealed that at least two online advertising analytics companies are currently using this vulnerability to monitor the IE user's mouse trajectory.

Microsoft made a public statement on this news today:

The website can track the user's mouse movement track, even if the IE window has been minimized, they can only get the mouse's movement track, and I don't know what the user is doing. We have communicated with security researchers in the industry that this vulnerability does not pose a security threat to users. As we mentioned earlier, there have been no messages showing that this vulnerability has led to the theft of user information.

Spider.io believes that turning mouse tracks into data is not difficult. The monitor can confirm the nature of the website and the layout of the website that the user visits through ad targeting. It seems that Microsoft does not agree with this view.

Regardless of the size of the security threat, the existence of the vulnerability is an indisputable fact, and I hope that Microsoft can fix it as soon as possible.