Update: Hack Investigation At Dept. of Labor Turns Up Internet Explorer 8 Zero Day Hole

**Executive Summary:** A watering-hole compromise of the U.S. Department of Labor website used a previously unknown IE8 use-after-free zero-day to deliver malware—researchers link the campaign to the China-based APT "DeepPanda" and note targeted pages related to nuclear/energy personnel; Microsoft issued an advisory and recommended mitigations including applying updates and EMET.