A zero-day vulnerability exploiting IE8 allows remote code execution if users browse to a malicious website with an affected browser. It is believed to be highly targeted and aimed at Department of Energy (DOE) employees who worked with nukes. The Department of Labor website served up malicious code that was capable of disabling some antivirus products. Microsoft advised users who will continue to use IE8 to “Set Internet and local intranet security zone settings to ‘High’ to block ActiveX controls in these zones””]