News

Windows 10 Creators Update To Let Users Block Flash

Future versions of Windows 10 will give users the means to block the Flash browser plug-in, Microsoft said this week.

In an announcement, Microsoft said that users will get the choice to either block or use Flash when they visit Web sites through a dialog box. The changes Microsoft will be making will be similar to "updates coming from our friends at Apple, Mozilla, and Google," Microsoft explained.

One difference with Microsoft's approach, though, is that users will be able to use Flash, if wanted, "for any site they visit." Microsoft currently includes Flash in Windows, but it's not part of the long-term picture, at least for use with the Microsoft Edge browser. In April, the Microsoft Edge team stated that "we are planning for and look forward to a future where Flash is no longer necessary as a default experience in Microsoft Edge."

Microsoft's announcement urged Web site developers to move toward using Flash alternatives "in the coming months." They can use "mechanisms like JavaScript and HTML5 Encrypted Media Extensions, Media Source Extensions, Canvas, Web Audio, and RTC" in their content, Microsoft suggested.

No exact timeline was indicated, but Microsoft's announcement suggested that it would evolve the Flash user notification approach with subsequent Windows 10 releases. The target for its appearance will be the Windows 10 "creators update," which is planned for arrival in the spring of 2017 (and rumored for a March release).

Flash is seen as security target, at least in the cases where it wasn't kept updated. It's also considered to be a battery hog for mobile devices since Flash powers ads on Web sites. The Microsoft Edge browser is already automatically pausing Flash ad content that's deemed nonessential, which kicked off with the Windows 10 anniversary update release.

Ironically, Flash exploits have declined, year over year, according to the latest Microsoft Security Intelligence Report, which covers the first half of 2016.

"Fewer zero-day Flash Player exploits were discovered in 1H16 than during comparable periods in 2015, and fewer post-update exploits were incorporated into exploit kits," Microsoft's SIR report stated.

The report attributed the decline to Adobe's latest exploit mitigations, as well as the use of "Control Flow Guard technology in Windows 10, which makes memory corruption vulnerabilities harder to exploit."

However, the Adobe Flash Player was exploited in early May by the Promethium and Neodymium activity groups. These groups used a zero-day Flash flaw to target individuals, mostly in Europe. The Promethium group delivered malicious links in instant messaging software, while the Neodymium group used phishing campaigns and e-mail attachments, according to Microsoft.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

  • Microsoft Appoints Althoff as New CEO for Commercial Business

    Microsoft CEO and chairman Satya Nadella on Wednesday announced the promotion of Judson Althoff to CEO of the company's commercial business, presenting the move as a response to the dramatic industrywide shifts caused by AI.

  • Broadcom Revamps VMware Partner Program Again

    Broadcom recently announced a significant update regarding its VMware Cloud Service Provider (VCSP) program, coinciding with the release of VMware Cloud Foundation (VCF) 9.0, a key component in Broadcom’s private cloud strategy.

  • Closeup of the new Copilot keyboard key

    Microsoft Updates Copilot To Add Context-Sensitive Agents to Teams, SharePoint

    Microsoft has rolled out a new public preview for collaborative "always on" agents in Microsoft 365 Copilot, bringing enhanced, context-aware tools into Teams channels, meetings, SharePoint sites, Planner workstreams and Viva Engage communities.

  • Windows 365 Cloud Apps Now Available for Public Preview

    Microsoft announced this week that Windows 365 Cloud Apps are now available for public preview. This aims to allow IT administrators to stream individual Windows applications from the cloud, removing the need to assign Cloud PCs to every user.