Microsoft revamps Edge's "IE Mode" after zero-day attacks

A group of US investors, led by Robert Simonds, has acquired Israeli spyware firm NSO Group for tens of millions of dollars, a notable transaction given the company's continued presence on the US Treasury's banned entities list. This development coincides with the FCC signaling an impending crackdown on sanctioned Chinese electronic products, prompting US retailers to remove items and indicating stricter import controls. Meanwhile, the cybersecurity landscape remains highly active, evidenced by a zero-day exploit in Microsoft Edge's IE Mode, a data breach impacting crypto casinos, and the targeting of UniCredit's CEO with advanced spyware, underscoring pervasive digital risks across various sectors.

Analysis

Microsoft has significantly revamped its Edge browser's "IE Mode" following zero-day attacks that exploited the legacy Chakra JavaScript engine, leading to device takeovers. The overhaul removes direct access buttons, mandating manual enabling and URL allowlisting, reflecting a critical response to a persistent vulnerability. Concurrently, Salesforce faces ongoing cyber threats, with the FBI seizing an extortion site targeting its customers and a reported 7.3 million details leaked from Vietnam Airlines' Salesforce account, highlighting supply chain and data privacy risks.

In contrast, Apple has demonstrated a proactive security stance by doubling its bug bounty rewards to $5 million for top vulnerabilities and introducing new age verification tools and policies in Texas, enhancing platform integrity and addressing regulatory compliance. Separately, the acquisition of Israeli spyware maker NSO Group by US investors for tens of millions of dollars, despite its presence on the US Treasury's banned entities list, signals complex geopolitical and strategic interests in the cyber intelligence sector. Furthermore, the FCC's impending crackdown on sanctioned Chinese electronic products is prompting US retailers to remove items, indicating a broader regulatory shift towards stricter import controls.

The broader cybersecurity landscape remains highly active and challenging, as evidenced by multiple incidents including the Fast Track breach impacting crypto casinos Shuffle and Roobet, and the targeting of UniCredit's CEO with Paragon's Graphite spyware. Large-scale threats like the Aisuru DDoS botnet, now drawing firepower from over 300,000 US-based IoT devices, and a wave of RDP attacks targeting 100,000 unique US IPs, underscore the pervasive and evolving nature of cyber risks across various sectors.

Key Decisions for Investors

• Investors should scrutinize companies' cybersecurity resilience, incident response capabilities, and regulatory compliance, especially those with significant exposure to legacy systems or sensitive data like Microsoft and Oracle.
• Monitor regulatory developments, particularly the FCC's stance on Chinese tech and the implications of NSO Group's acquisition, as these could signal shifts in market access and geopolitical risk for tech and defense holdings.
• Evaluate the impact of increased bug bounties and proactive security measures, such as Apple's, on long-term platform integrity and competitive advantage, while remaining cautious about companies facing persistent critical vulnerabilities.