Microsoft Tightens IE Mode After Hackers Exploit Internet Explorer Bugs Again

Microsoft has issued a warning regarding hackers exploiting unpatched Internet Explorer vulnerabilities through "IE Mode" within its Edge browser, enabling remote access and data theft via social engineering tactics. Attackers are leveraging this legacy mode, retained for older website compatibility, to achieve remote code execution and privilege escalation, bypassing Edge's security safeguards. In response, Microsoft is implementing stricter activation controls for non-commercial users by removing easy access points to IE Mode, aiming to make its use more intentional; however, these measures are a hindrance rather than a complete fix and do not apply to commercial users, with the company ultimately advising users to abandon the outdated Internet Explorer for enhanced security.

Analysis

Microsoft (MSFT) has issued a warning regarding active exploitation of unpatched Internet Explorer vulnerabilities through its "IE Mode" within the Edge browser. Hackers are leveraging social engineering to trick users into activating this legacy mode, enabling remote code execution via Chakra engine exploits and privilege escalation to gain full control of devices, bypassing Edge's security safeguards. This allows for malware installation, network spying, and data theft, posing a significant cybersecurity risk.

In response, Microsoft is implementing stricter activation controls for non-commercial users by removing high-risk entry points like dedicated toolbar buttons and context menus for IE Mode. The goal is to make the decision to load web content using legacy technology "significantly more intentional." However, Microsoft acknowledges these measures are "not a patch, merely a hindrance," and notably, "no changes were made to the logic for commercial users to enable IE mode through enterprise policies."

The continued vulnerability of IE Mode highlights the challenges of maintaining backward compatibility while ensuring modern security. While Microsoft is attempting to mitigate risks for non-commercial users, the lack of a full patch and unchanged policies for commercial users suggest ongoing exposure. The company's ultimate recommendation for users to abandon Internet Explorer underscores the inherent security risks associated with outdated web technologies.