Zero-Day Internet Explorer Vulnerability

First of all – what does zero-day mean? It is the day a vulnerability was found. If a bug was around for 10 days it would be a 10-day vulnerability. Usually a fix will be developed in the form of a patch or workaround.

A zero-day exploit means an attack takes place the day a vulnerability is discovered.

On March 30, 2019, two zero-day vulnerabilities were discovered in Microsoft EDGE and Internet Explorer. Without getting too technical, the behind the scenes code of the browser can occur when you visit a malicious site and some of the same origin policy code allows other sites to intervene. When working correctly, it would prevent other sites from accessing your information.

Another vulnerability is related to MHT files. Internet Explorer can still read MHT files. If you are using Outlook, you may see this above an email: “If there are problems with how this message is displayed, click here to view it in a web browser.” It will then open in IE even if you are using Windows 10 with Edge. If the MHT file is infected you will have problems.

To prevent programs from opening IE, you can go into “Programs and Features” in Control Panel and then to “Turn Windows features on or off” and uncheck Internet Explorer 11. Restart your computer.

Trend Micro Blog

Microsoft Edge

Microsoft Edge has come a long way. The Victor crew tried something out this past week and it works like a charm. You can connect your phone to your PC through Edge. The practical side is if you are looking at something on your phone (small device) and want to view something larger, you can send the page you are viewing on your phone to your PC. And yes, iPhone users, that means you too!

Install Edge on your mobile device (works with iPad as well). Sign in with your Microsoft password.

Scroll to a site and at the bottom you will see some icons.

Browse on Edge Browser

The middle icon (mobile device with arrow) is what you touch to send to your PC.

Next when you see the screen below, you would choose which PC to send it to. I only had one connected PC as shown below (name partially obscured.) Press the PC you want to send the page to.

Send to PC

You are done.

Sent from iPhone to PC

Windows 10 Creators Update: Tabs

By now, many have already chosen to update to the newest Creators Update for their Windows 10 machine. You can see what version you are running by going to Start >> Settings >> System >> About. The newest version is 1703. Before installing this version, you will be asked to review your privacy settings so you are not giving out any information you don’t want to. They will bring up a page of privacy settings to review. The privacy settings don’t go into effect until you actually install the Creators Update.

You can always visit your privacy settings after the update to further set your privacy preferences by going to Start >> Settings >> Privacy.

Here are some nice features you can only use with the Microsoft Edge Browser:
You can save tabs for later
You can pin tabs to your start menu
You can preview all open tabs either all at once or one at a time
You can sweep all your open tabs aside to use later
You can pin pages to open next time you come back

Microsoft 10 Event

So Microsoft has an event scheduled for October 26 at 10 am EDT in NYC. They say to join them to find out what is next for Windows 10. One can only speculate…

While we’re on the subject of Windows 10, did you know you can ‘write’ in the Edge browser and save it as a note to OneNote? If you have a touch enabled device you can use your finger or a stylus. If not, your mouse will work.

First you need to enable your “pen.” This is in the top right corner of the Edge browser.
Webnotes

Next you need to choose the type (pen or highlighter), color, and size. This will show up on the left hand side of the browser after you enable the pen.
webnotes

Then you can write on your page and save it as a note for later.
Webnotes

The Victor crew.