He claims that a zero-dayvulnerability is found in every version of Internet Explorer for any version of Windows and allows hackers to hijack any cookie for any website.
It is known as a "zero-day" vulnerability because, effectively, it has been there since the product was launched - dayzero - and not even its developer had spotted it.