The Indian government has issued a warning from its Computer Emergency Response Team (CERT) to Microsoft Edge users about the possibility of cyberattacks.
The government has further asked users to update their browsers promptly to protect their devices from such high-severity risks.
CERT-In Vulnerability Note (CIVN-2024-0316) identified several vulnerabilities in Microsoft Edge's Chromium-based versions:
1. Mojo Component:
2. V8 JavaScript Engine: has left many security gaps in the engine.
3. Integer Overflow Issue in Layout: this flaw may compromise the system.
The cause for these vulnerabilities is the lack of proper data validation and wrongful implementation of applications. These bugs could potentially be used by remote attackers to execute arbitrary code on a victim's system, putting millions of Microsoft Edge users at risk.
All versions of Microsoft Edge before 129.0.2792.79 are at risk. The system can be attacked without any user interaction by exploiting these vulnerabilities which makes them all the more deadly. Digitalization has given rise to phishing attacks and many Ponzi schemes recently.
In recent news, even Windows users were warned of malware in the system that poses cybersecurity risks. According to a report by cybersecurity firm CloudSEK, the Lumma Stealer malware was using human verification pages to spread on Windows devices. Read more
Open Microsoft Edge, and select the three-dot menu from the top-right side. Go to 'Help and Feedback', tap on it, and open your update settings. Click on 'About Microsoft Edge', this will make the browser seek updates if they are available, it will download it.
Stay vigilant of the websites you go to and unknown links you might click to safeguard against online hacking. Keeping your antivirus software updated will also guard you.