Security News
Microsoft has fixed a nasty bug that was causing the Microsoft Edge browser to crash while watching YouTube videos or reading comments. At the time, Microsoft acknowledged the issue in numerous Reddit discussions and asked users to try Microsoft Edge Canary to test a fix that they were working on.
As the world begins to open up and we crawl toward a brighter future, people are going to be looking for things to do and places to go - so we also expect to see social-engineering attacks start using things like travel and vacation deals to hook people. With many companies continuing to allow at least some of their employees to work remotely with no stipulated end date, security leaders have to stay abreast of the latest threats regarding edge access and browsers.
A Microsoft Edge bug is causing the browser to become unresponsive and crash while watching YouTube videos or reading comments. In our tests, Microsoft Edge would become unresponsive when watching a video, and a circular loading graphic would appear.
Hewlett Packard Enterprise is urging customers to patch one of its premier edge application management tools that could allow an attacker to carry out a remote authentication bypass attack and infiltrate a customer's cloud infrastructure. Rated critical, with a CVSS score of 9.8, the bug impacts all versions of HPE's Edgeline Infrastructure Manager prior to version 1.21.
Microsoft Edge will automatically redirect users to a secure HTTPS connection when visiting websites using the HTTP protocol, starting with version 92, coming in late July. By default, this new option will allow Edge users to switch from HTTP to HTTPS on websites that are likely to support the more secure protocol.
Microsoft has disabled Google's controversial FLoC browser-based tracking feature in their Chromium-based Microsoft Edge browser. This month, Google began testing a new tracking platform called Federated Learning of Cohorts, or FLoC, that places users in anonymous buckets, or cohorts, based on their interest and browsing behavior.
Microsoft Edge's update server is suffering a worldwide outage preventing users from updating to the newly released version 90 of the web browser. In tests conducted by BleepingComputer just now, the update server still has problems, as shown below.
Microsoft Edge's new child-friendly 'Kids Mode' is now generally available and has begun rolling out to users in the USA. In February, Microsoft announced a new child-friendly Kids Mode designed for children between the ages of 5-8 and 9-12 that provides a safe environment for children to browse the web and consume family-friendly content. What is nice about Microsoft Edge's Kids Mode is that you do not have to set up parental controls, install software on different devices, or deal with a lengthy configuration.
Aruba, a Hewlett Packard Enterprise company announced an expansive set of cross-portfolio edge-to-cloud security integrations for Aruba ESP. The new advancements include the integration of the ClearPass Policy Manager secure network access control platform with the Aruba EdgeConnect SD-WAN edge platform, formerly Silver Peak, the integration of Aruba Threat Defense with the EdgeConnect platform, and the expansion of the Aruba ESP multivendor security partner ecosystem, providing enterprise customers with the freedom to deploy, cloud-delivered secure access service edge security components of their choice. Since IoT devices are agentless, IT departments cannot install security clients or redirect device traffic to cloud security services; therefore, zero trust security must be applied at the WAN edge.
ID R&D announced that its passive facial liveness detection product, IDLive Face, now runs on the NVIDIA Jetson XavierNX. The small form factor system-on-module supports multiple AI neural networks running in parallel and trillions of operations per second, resulting in faster processing and lower hardware costs when deploying face biometrics with liveness detection on embedded IoT and edge computing systems. Support for IDLive Face on Jetson Xavier NX mitigates size, power, and cost constraints that have limited the ability to deploy and scale face biometrics in standalone devices.