From Bug Hunting to Bug Prevention with Rust and Verus Rewriting existing software in Rust brings memory safety, and the cleanup that comes with a rewrite... 2026-11-9 08:0:0 | 阅读: 1 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io verus arithmetic brotli twin usize

SleeperWidget: How Ad-Driven Installs Activate Hidden Browser Extension Behavior Browser extension stores review submissions to identify harmful or deceptive behavior before they re... 2026-10-16 14:0:0 | 阅读: 9 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io landing advertising microsoft activation

AI and the Rise of Patch-Gap Abuse Microsoft Edge Security and Microsoft Threat Intelligence recently disrupted several sustained attac... 2026-10-7 14:0:0 | 阅读: 20 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io microsoft security attackers gap chromium

Beyond Images: Bringing Rust Brotli to Edge Network Stack IntroductionIn our previous post we described how the Edge Security team turned the Rust PNG proof p... 2026-9-23 14:0:0 | 阅读: 24 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io brotli network codecs chromium memory

Rustifying Image Codecs in Chromium A cross-team effort to make browser image decoding safer without slowing the web down.IntroductionIm... 2026-7-17 14:0:0 | 阅读: 37 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io chromium memory bmp codec

Inside StegoAd: How We Disrupted a Massive Malicious Extension Campaign 119 extensions, up to 2.6 million installs, delayed execution, and payloads hidden inside image and... 2026-6-16 14:0:0 | 阅读: 32 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io malicious payload stegoad analysis developer

Saved passwords in Edge memory: what we're changing and why Browsers help protect some of the most sensitive data people have, including passwords. That’s why w... 2026-5-14 14:0:0 | 阅读: 50 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io security passwords exposure defenses memory

Using Markov Models for Password Complexity Estimation in Microsoft Edge 嗯，用户让我帮忙总结一篇文章，控制在100字以内，而且不需要特定的开头。首先，我得通读整篇文章，理解主要观点。 文章主要讲的是密码强度评估工具zxcvbn的局限性，以及微软Edge团队如何用马尔可夫模型来改进这一点。他们发现zxcvbn依赖词典和规则，存在偏见和过时的问题。而马尔可夫模型基于字符序列的概率，更准确且高效。 接下来，我需要提炼这些要点，确保在100字以内。重点包括：zxcvbn的缺点、马尔可夫模型的优势、改进后的效果和效率提升。 最后，组织语言，确保简洁明了，不使用任何开头套话。 </think> 微软Edge团队重新审视了密码强度评估方法，发现基于词典和规则的传统工具存在偏见和局限性。通过分析用户密码习惯和攻击者行为，他们提出了一种基于马尔可夫模型的新方法，能够更准确地评估密码强度，并减少资源消耗。... 2026-3-24 06:30:0 | 阅读: 26 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io passwords strength estimator zxcvbn markov

Securing the Future: Changes to Internet Explorer Mode in Microsoft Edge 微软Edge浏览器安全团队针对利用IE模式的攻击进行了响应，限制了IE模式的访问入口以减少风险，并要求用户手动启用特定网站的IE兼容性支持。这一措施平衡了旧技术支持与现代安全需求。... 2025-10-8 15:0:0 | 阅读: 17 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io security microsoft attackers chakra victim

Browser Security Bugs that Aren't - #2: Web Attacks In a previous blog Browser Security Bugs that Aren’t we covered some of the most common submissions... 2024-10-22 03:30:0 | 阅读: 29 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io microsoft translate chromium translation security

Mitigating RIDL Side-Channel Attack in Microsoft Edge on Windows In 2019 researchers from Vrije Universiteit Amsterdam shared details of a new side-channel attack wh... 2024-6-24 23:0:0 | 阅读: 40 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io ridl microsoft security renderer

Making Mojo Exploits More Difficult IntroductionToday, we’re excited to announce a new security protection in Microsoft Edge that defend... 2024-3-14 14:30:0 | 阅读: 41 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io mojojs renderer mojo chromium attackers

Browser Security Bugs that Aren't - #1: Local Attacks IntroductionHello and welcome to the first in a new series of blog posts in which we will discuss so... 2024-1-2 23:30:0 | 阅读: 37 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io security malicious attacker injection behaviour

Escaping the sandbox: A bug that speaks for itself IntroductionIn this blog post, we will share the story about how we discovered a critical stack corr... 2023-2-8 19:0:0 | 阅读: 36 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io speech sapi windows chromium library

Behind the Scenes: How we are securing our new PDF stack As we recently published on the Microsoft Edge Dev blog, Adobe and Microsoft are enhancing the PDF e... 2023-2-8 19:0:0 | 阅读: 39 | 收藏 | Microsoft Browser Vulnerability Research - microsoftedge.github.io microsoft security onefuzz pillar

Guest Blog Post - Memory corruption vulnerabilities in Edge Memory corruption issues in the browser process are typically some of the most severe issues in Chro... 2022-10-18 00:0:0 | 阅读: 45 | 收藏 | microsoftedge.github.io dialog msedge crash destroyed

A Story of a Bug Found Fuzzing In a previous blogpost it covered and mentioned automation and how it is great at finding memory iss... 2022-6-10 23:30:0 | 阅读: 42 | 收藏 | microsoftedge.github.io char16 unescape fuzzer text16 crash

Introducing Enhanced Security for Microsoft Edge Today, we’re excited to announce some improvements to our experimental security feature in Microsoft... 2022-2-16 23:0:0 | 阅读: 35 | 收藏 | microsoftedge.github.io microsoft security engagement acg experiment

Bug bounty hunter to working at Microsoft I usually write about achievements in the form of a browser bug that I found interesting, in hopes t... 2021-10-11 23:30:0 | 阅读: 26 | 收藏 | microsoftedge.github.io security chromium myself tl microsoft

Super Duper Secure Mode The VR team is experimenting with a new feature that challenges some conventional assumptions held b... 2021-8-4 23:50:0 | 阅读: 27 | 收藏 | microsoftedge.github.io security attackers memory regressions renderer