Security Updates End for IE8, 9 and 10

Microsoft recently announced that as of Jan. 12, 2016, Internet Explorer (IE) versions 8, 9 and 10 will no longer receive security updates, officially marking the end of life (EOL) for these products. One final security upgrade will be sent out Jan. 12 for all the versions.

The security updates will appear on Windows 7 Service Pack 1 (x32 and x64) and on Windows Server 2008 R2 Service Pack 1 (x32 and x64) Edition, according to a report in SecurityWeek. This update also includes a new EOL upgrade notification feature.

Investigating IE Browser Share

IE still has the greatest share of use on desktops, according to NetMarketShare. That is undoubtedly due to the prevalence of older versions in the mix. When the version usage is broken out, as GlobalStats showed, the picture looks dramatically different.

For example, in 2015, GlobalStats found that IE8 had a 1.8 percent share, IE9 had a 1.31 percent share, IE10 had a 1.12 percent share and IE11 accounted for 6.84 percent. These are all far behind the numbers for Chrome (44.87 percent) and Firefox (10.37 percent). It seems that even if IE is present on desktops, other browsers are actually being used more.

Security Updates Push Users to IE11

Microsoft announced the EOL plans in 2014, so the move to end security updates is not a surprise. Older IE versions have had many security problems including remote code execution, elevation of privilege, information disclosure and security feature bypasses.

Microsoft released a list of reasons to upgrade, and it stresses security in that list. Interestingly, it also emphasizes that IE11 will deal with HTML5 natively, which bypasses the need for Adobe Flash Player, well-known for its history of vulnerabilities. The company added that doing the upgrade will be very economically beneficial for the enterprise.

The upgrade is very simple if automatic updates has been enabled on a machine. But if deployment must be done manually, there is also a planning toolkit available to find and upgrade older browser installations.

Upgrading Is the Way to Go

Even though compatibility issues that may be present with older Web apps, the security benefits of eliminating the use of outdated Web browsers in the enterprise are compelling. This announcement should be the wake-up call that IT pros heed to get the task done.

Larry Loeb

Principal, PBC Enterprises

NIST’s role in the global tech race against AI

4 min read - Last year, the United States Secretary of Commerce announced that the National Institute of Standards and Technology (NIST) has been put in charge of launching a new public working group on artificial intelligence (AI) that will build on the success of the NIST AI Risk Management Framework to address this rapidly advancing technology.However, recent budget cuts at NIST, along with a lack of strategy implementation, have called into question the agency’s ability to lead this critical effort. Ultimately, the success…

Researchers develop malicious AI ‘worm’ targeting generative AI systems

2 min read - Researchers have created a new, never-seen-before kind of malware they call the "Morris II" worm, which uses popular AI services to spread itself, infect new systems and steal data. The name references the original Morris computer worm that wreaked havoc on the internet in 1988.The worm demonstrates the potential dangers of AI security threats and creates a new urgency around securing AI models.New worm utilizes adversarial self-replicating promptThe researchers from Cornell Tech, the Israel Institute of Technology and Intuit, used what’s…

Passwords, passkeys and familiarity bias

5 min read - As passkey (passwordless authentication) adoption proceeds, misconceptions abound. There appears to be a widespread impression that passkeys may be more convenient and less secure than passwords. The reality is that they are both more secure and more convenient — possibly a first in cybersecurity.Most of us could be forgiven for not realizing passwordless authentication is more secure than passwords. Thinking back to the first couple of use cases I was exposed to — a phone operating system (OS) and a…

Security Intelligence

{{title}}

{{title}}

{{title}}

Topics

Investigating IE Browser Share

Security Updates Push Users to IE11

Upgrading Is the Way to Go

More from

NIST’s role in the global tech race against AI

Researchers develop malicious AI ‘worm’ targeting generative AI systems

Passwords, passkeys and familiarity bias

Topic updates