Cyber Risks · Krebs on Security

Test Your Browser’s Patch Status

Summary: Qualys released a BrowserCheck plug-in that scans Internet Explorer, Firefox, Chrome and Opera on Windows, Mac and Linux for outdated browser components and fetches the vendor installers to update them. Krebs notes that the installers the tool pulls down can come with pre-checked bundled software, such as Registry Mechanic with an Adobe Shockwave update and Ask.com search settings with a Foxit Reader update.

Why it matters: The tool that fixes your browser can also install unwanted software: Krebs found the Shockwave update had Registry Mechanic pre-checked and the Foxit update wanted to set Ask.com as default search provider and home page, so a security fix can quietly widen what runs on the machine.

Read the original at Krebs on Security ↗

Topics
Vulnerabilities & Patching
Related