Frame-14

Privacy Ninja

        • DATA PROTECTION

        • Email Spoofing Prevention
        • Check if your organization email is vulnerable to hackers and put a stop to it. Receive your free test today!
        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • AntiHACK Phone
        • Boost your smartphone’s security with enterprise-level encryption, designed by digital forensics and counterintelligence experts, guaranteeing absolute privacy for you and up to 31 others, plus a guest user, through exclusive access.

        • CYBERSECURITY

        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$3,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Secure your digital frontiers with our API penetration testing service, meticulously designed to identify and fortify vulnerabilities, ensuring robust protection against cyber threats.

        • Network Penetration Testing
        • Strengthen your network’s defenses with our comprehensive penetration testing service, tailored to uncover and seal security gaps, safeguarding your infrastructure from cyber attacks.

        • Mobile Penetration Testing
        • Strengthen your network’s defenses with our comprehensive penetration testing service, tailored to uncover and seal security gaps, safeguarding your infrastructure from cyber attacks.

        • Web Penetration Testing
        • Fortify your web presence with our specialized web penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats.

        • RAPID DIGITALISATION

        • OTHERS

Microsoft Edge Adds Super Duper Secure Mode to Stable Channel

Microsoft Edge Adds Super Duper Secure Mode to Stable Channel

Microsoft has quietly added a ‘Super Duper Secure Mode’ to the Microsoft Edge web browser, a new feature that brings security improvements without significant performance losses.

Users can enable Super Duper Secure Mode after upgrading Edge to stable version 96.0.1054.29 or later, and they can toggle between Balanced and Strict modes for different levels of security increase.

The new feature, under testing by the Edge Vulnerability Research team since August, removes Just-In-Time Compilation (JIT) from the V8 processing pipeline, thus reducing the attack surface threat actors can exploit to hack into Edge users’ systems. 

Microsoft describes Super Duper Secure Mode as “a browsing mode in Microsoft Edge where the security of your browser takes priority, providing you an extra layer of protection when browsing the web.”

Also Read: What You Need to Know About Singapore’s Data Sharing Arrangements

“We quietly released Super Duper Secure Mode to stable (96.0.1054.29),” said Johnathan Norman, Microsoft Edge Vulnerability Research Lead.

“Balanced learns what sites you use often and trusts those, strict is well.. strict 🙂 Users can now add their own exceptions.”

Enabling Super Duper Secure Mode in Microsoft Edge
Enabling Super Duper Secure Mode in Microsoft Edge (BleepingComputer)

When toggled on, Super Duper Secure Mode disables JIT (TurboFan/Sparkplug) and enables Intel’s Control-flow Enforcement Technology (CET), a hardware-based exploit mitigation that provides a more secure browsing experience.

As Norman revealed in August when the feature was first announced, roughly 45% of all security vulnerabilities found in the V8 JavaScript and WebAssembly engine were related to the JIT engine, accounting for over half of all ‘in the wild’ Chrome exploits abusing JIT bugs.

By disabling JIT, the attack surface is drastically reduced by removing almost half of the V8 bugs that should be fixed.

“This reduction in attack surface kills half of the bugs we see in exploits and every remaining bug becomes more difficult to exploit. To put it another way, we lower costs for users but increase costs for attackers,” Norman explained.

In the future, Microsoft aims to include support for Arbitrary Code Guard (ACG) in Super Duper Secure Mode, another security mitigation that would block attackers from loading malicious code into memory, a known technique used by most web browser exploits.

The Edge Vulnerability Research team also plans to ship the new feature with the Android and macOS Edge versions.

Also Read: PDPA Compliance for HR Managers in Singapore: A Must

0 Comments

KEEP IN TOUCH

Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection

REPORTING DATA BREACH TO PDPC?

We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.
×

Hello!

Click one of our contacts below to chat on WhatsApp

× Chat with us