Security researchers have uncovered two unpatched vulnerabilities in Internet Explorer (IE) “Watering hole” campaign launched from a U.S.-based website. Microsoft said that it was investigating the reports of IE “zero-day” bugs. Researchers say the flaws exist in IE7, IE8, IE9 and IE10, with attacks seen in the wild against all but 2012’s IE10. The exploits left no trace on the computer’s hard disk drive, instead, the hackers loaded the attack code directly into memory, where it executed.”]

