It looks like another critical bug has been squashed by Microsoft, this time affecting the Internet Explorer browser that remains packaged in Windows 10, and Windows Defender (Windows’ own anti-virus). This means it is time yet again to update Windows and secure yourself from the big scary world of do-no-gooders looking to make trouble every chance they get.
This new vulnerability opens the ability to strike via Internet Explorer (IE) 9,10 and 11. It allows an attacker the ability to gain access as the current logged in user, and can then shut the user out of having access to Windows Defender.
The update to patch Windows Defender should be rolling out now. You can run Windows Update via settings to scan for it, in case it hasn’t already installed automatically in the background. It doesn’t seem to require a reboot of the system (at least in our experience).
The update for Internet Explorer apparently won’t roll out until October of next year. However, you can manually install it yourself today. You can find it by looking for the specific version of IE you currently have installed on your PC in the list here on Microsoft’s website.
The IE browser is old and outdated but still remains available in the case of user-preference (at least, one can only assume that’s the reason at this point). I can say that no one here uses IE any longer except for very rare cross-compatibility checks. There are also certain devices that only allow access via that browser (ie, a few select Foscam IP camera models that flopped sales-wise due to this).
