Microsoft Edge

Reported Context (5)

vulnerabilities present in the latest stable versions of Chrome and Chromium-based browsers (such as Microsoft Edge), it was paired with a Windows LPE vulnerability present only in older Windows builds. Multiple State-Aligned Threat Actors Rapidly Adopt BlueMoon Chrome and Windows Exploit Chain
While we primarily observed this campaign in the Chrome extension ecosystem, the discovery of the latest malicious Edge extensions proves that it has expanded to Microsoft Edge. 19 Chrome and Edge Extensions Deliver Wallet Drainers and Credential-Stealing Malware
Microsoft .NET (6.3%), Visual C++/Studio (5.4%), Microsoft SQL Server (4.4%), Mozilla Firefox (4.3%), Microsoft Edge (3.6%), Microsoft Office (1.6%) and LibreOffice (0.0%). Most patches from these products can move Acronis Finds Patch Warning Rates Vary Widely Across SMB Windows Software
Acting as a backdoor, Edgecution gives operators extensive control over the victim's Microsoft Edge browser and host system, enabling them to monitor visits to targeted websites, such as banking, email, VPN, and UNC6692 Uses Email Bombing, IT Impersonation and Quick Assist to Deploy Edgecution
Although Internet Explorer reached end of support on June 15, 2022, Microsoft Edge still includes an IE mode to ensure backward compatibility, with support promised at least until 2029 [2]. Bitdefender Details Malware Campaigns Abusing Windows’ MSHTA Utility

CVE (5)

Malware (13)

People (2)

Threat Actors (7)

MITRE ATT&CK (45)

Vendors (12)

Products (57)

Tools (6)

Industries (11)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.