Microsoft Office

Threat Actors Abuse Red Team Tool MacroPack to Deliver Malware
Jeffrey Burt | | Cisco Talos, Cybersecurity, malware from legitimate sources, Microsoft Office, VBA macros
Cisco Talos researchers found that multiple bad actors were abusing the MacroPack framework, continuing an ongoing trend of hackers repurposing legitimate security software tools to run cyber campaigns against organizations ...
Security Boulevard
Microsoft’s Security Update in July of High-Risk Vulnerabilities in Multiple Products
NSFOCUS | | .NET Framework, azure, Blog, Emergency Response, Microsoft Office, Microsoft SQL Server, Microsoft Visual Studio, security update, System Management Center, Windows
Overview On July 10, NSFOCUS CERT detected that Microsoft released a security update patch for July, which fixed 139 security issues involving Windows, Microsoft SQL Server, Microsoft Office, Azure and other widely ...

Microsoft Patch Tuesday, February 2023 Edition
BrianKrebs | | CVE-2023-21529, CVE-2023-21706, CVE-2023-21707, CVE-2023-21715, CVE-2023-21716, CVE-2023-21823, CVE-2023-23376, Dustin Childs, Immersive Labs, Internet Explorer 11, Johannes Ullrich, Kevin Breen, Latest Warnings, Mandiant, Microsoft Office, Microsoft Patch Tuesday February 2023, SANS Internet Storm Center, Security Tools, Time to Patch, Trend Micro Zero Day Initiative
Microsoft is sending the world a whole bunch of love today, in the form of patches to plug dozens of security holes in its Windows operating systems and other software. This year's ...

STUPID Microsoft U-Turn: Unblocks Malicious Macros in Office
Richi Jennings | | macro malware, Microsoft, Microsoft Office, SB Blogwatch, VBA, Yet another Satya macro hero adorns above foolishness
Microsoft stunned security professionals by reversing a change that prevents Office from auto-running macros ...
Security Boulevard

Microsoft Suggests Work-Around For ‘Serious’ Follina Zero-Day
While malicious email attachments are nothing new, there’s reason to be particularly cautious when it comes to the new zero-day vulnerability, dubbed Follina, found in Microsoft Word, for which the tech giant ...
Security Boulevard
Tripwire Patch Priority Index for July 2021
Lane Thames | | adobe, Microsoft, Microsoft Office, Oracle, patch priority index, VERT, VMware, Vulnerabilities
Tripwire’s July 2021 Patch Priority Index (PPI) brings together important vulnerabilities from VMware, Adobe, Oracle, and Microsoft. First on the patch priority list this month are patches for Microsoft Print Spooler (CVE-2021-34527, ...

Patch Tuesday, Good Riddance 2020 Edition
BrianKrebs | | adobe, Allan Liska, Microsoft Office, Microsoft Patch Tuesday December 2020, Microsoft Teams, Oskars Vegeris, Recorded Future, Security Tools, Time to Patch
Microsoft today issued its final batch of security updates for Windows PCs in 2020, ending the year with a relatively light patch load. Nine of the 58 security vulnerabilities addressed this month ...

Windows Security wants your Outlook password (over and over) – SOLVED
Scenario: Outlook on your Windows 10 PC has stopped working, continually asks for your username and password, but nothing you type will work. You’ve tried Googling it. Your Outlook password isn’t working! ...

Phishing Campaign Uses Internal Email to Trick Employees into Sharing Office 365 Credentials
A campaign targeting Office 365 customers used a compromised internal email for phishing messages, giving much more credence to an email that people would otherwise dismiss immediately. Phishing emails are a fact ...

Court Lets Microsoft Seize Web Domains Used in COVID-19 Phishing/BEC Scams and Fraud
Filip Truta | | bec, bec scam, business email compromise, Industry News, Microsoft, Microsoft Office, office, office 365, Phishing, phishing-scam
A U.S. court order has allowed Microsoft to seize control of key domains controlled by fraudsters to halt criminal activity after an increase in scams targeting users of Office 365. The U.S ...