Microsoft Tightened Security Windows With EMET 5.2

Microsoft has released a new version of the free security tool released EMET, which should make it more difficult for attackers to attack Windows computers through both unknown and known vulnerabilities. EMET stands for Enhanced Mitigation Experience Toolkit and adds an extra layer of security to Windows and installed applications increase, so often exploits software vulnerabilities no longer work.

EMET 5.2 includes several fixes and improvements. EMET so now supports warnings and reports of Modern Internet Explorer and IE desktop with Enhanced Protected Mode. There is an added measure to prevent attacks using VBScript. It is an attack technique called "VBScript God Mode", which was used by attackers in recent attacks. This allows an attacker to execute malicious script with elevated privileges.

Additionally, the DLL files are EMET now with Control Flow Guard compiled. This is a new feature that hijacking code must exist. In the past, researchers have demonstrated several times that EMET circumvented can be. In practice, however, it appears that attackers in a different way take into account EMET. So last year was a zero-day attack on IE10 discovered .The attackers, however, decided not to execute the exploit on computers that EMET was installed, probably to avoid detection of the exploit. EMET 5.2 is through this page ( msi download).

Warning of new vulnerability in Internet Explorer

There is a new and critical vulnerability in Internet Explorer discovers that actively used to infect computers with malware and cyber criminals which no update is available from Microsoft. The vulnerability affects Internet Explorer 6 to Internet Explorer 11.

The attacks that were observed, however, were directed against IE9, IE10 and IE11. According to the U.S. security firm FireEye is the exploit of the vulnerability abuse by an APT (advanced persistent threat) group "used in the past more zero-day vulnerabilities used, including Firefox and Adobe Flash Player.

"We think this is an important zero-day, because the vulnerable versions about a quarter of the browser market decide," said analyst Chen Xiaobo. The exploits that attackers use uses a technique known through Adobe Flash Player, the Windows security bypasses to attack the unknown. Leak in IE

Solution

Microsoft vulnerability has also been confirmed and suggests that it is deployed. in targeted attacks only on a limited scalePending a security IE users to take various measures to protect themselves. Enabling the Enhanced Protected Mode in IE10 and IE11 can prevent the attack. IE users on Windows 7 itself should enable this option. Windows 8 Enhanced Protected Mode is enabled only in the "Metro" version of IE. If the desktop version of the browser on Windows 8 should still enable the measure itself used.

Since the exploit Adobe Flash Player as a springboard to attack the causes browserlek to disable the Flash Player plug-in in Internet Explorer ensure that the attack does not work anymore. Finally IE users can protect themselves by installing the Enhanced Mitigation Experience Toolkit (EMET) version 4.1 or 5.0 Tech Preview .