Skip to main content

Microsoft discusses the details of Edge’s security

key, security
CreativeCommons
Preparing for a cyber attack is just a part of the job while designing a browser, and Microsoft has been hard at work on security features for Edge. The latest version of Microsoft’s browser will be adequately prepared for security threats when it debuts, according to a blog posted on May 11 on the Windows site.

Microsoft Edge will defend against common trickery tactics used by hackers to obtain personal information or money, such as phishing, through stronger credentials. Windows 10 will also have Microsoft Passport, a technology that uses asymmetric cryptography to authenticate you to your frequently visited websites.

With SmartScreen, Edge will be able to perform a reputation check on all websites you browse. Additionally, it will block sites that it deems prone to phishing.

Edge has a new rendering engine called Microsoft EdgeHTML, which will cater to developers looking to focus on the security aspect of website creation. However, the browser will no longer support VML, VB Script, Toolbars, BHOs or ActiveX.

“It is important to create an extension model that is safer, by sharing less state between the browser itself and the extensions,” wrote Crispin Cowan, senior program manager of Microsoft Edge.

It’s also worth noting that Microsoft Edge will be considered a Universal Windows app when it debuts. This means that all of its processes will live within an app container sandbox, which could prevent bugs and malware from accessing its user’s resources.

Finally, Edge will have a Memory Garbage Collector, which defends the browser from Use-After-Free vulnerabilities. The process of freeing memory will be taken away from the user and automated instead. Edge will also have Control Flow Guard, which checks coding to verify that it does not stem from a hacker.

“We believe Microsoft Edge will be the most secure web browser that Microsoft has ever shipped,” Cowan continued.

Windows 10, Microsoft’s latest operating system, is set to debut this summer.

Krystle Vermes
Former Digital Trends Contributor
Krystle Vermes is a professional writer, blogger and podcaster with a background in both online and print journalism. Her…
A dangerous new jailbreak for AI chatbots was just discovered
the side of a Microsoft building

Microsoft has released more details about a troubling new generative AI jailbreak technique it has discovered, called "Skeleton Key." Using this prompt injection method, malicious users can effectively bypass a chatbot's safety guardrails, the security features that keeps ChatGPT from going full Taye.

Skeleton Key is an example of a prompt injection or prompt engineering attack. It's a multi-turn strategy designed to essentially convince an AI model to ignore its ingrained safety guardrails, "[causing] the system to violate its operators’ policies, make decisions unduly influenced by a user, or execute malicious instructions," Mark Russinovich, CTO of Microsoft Azure, wrote in the announcement.

Read more