Tag: office
-
Microsoft Security Update Summary (8. April 2025)
Microsoft hat am 8. April 2025Sicherheitsupdates für Windows-Clients und -Server, für Office sowie für weitere Produkte veröffentlicht. Die Sicherheitsupdates beseitigen 121 Schwachstellen (CVEs), eine davon wurde als 0-day klassifiziert. Diese Schwachstelle wurde bereits angegriffen. Nachfolgend findet sich ein … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/04/09/microsoft-security-update-summary-8-april-2025/
-
Fake Microsoft Office add-in tools push malware via SourceForge
Threat actors are abusing SourceForge to distribute fake Microsoft add-ins that install malware on victims’ computers to both mine and steal cryptocurrency. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fake-microsoft-office-add-in-tools-push-malware-via-sourceforge/
-
Hackers lurked in Treasury OCC’s systems since June 2023 breach
Unknown attackers who breached the Treasury’s Office of the Comptroller of the Currency (OCC) in June 2023 gained access to over 150,000 emails. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-lurked-in-treasury-occs-systems-since-june-2023-breach/
-
Cryptocurrency Miner and Clipper Malware Spread via SourceForge Cracked Software Listings
Threat actors have been observed distributing malicious payloads such as cryptocurrency miner and clipper malware via SourceForge, a popular software hosting service, under the guise of cracked versions of legitimate applications like Microsoft Office.”One such project, officepackage, on the main website sourceforge.net, appears harmless enough, containing Microsoft Office add-ins copied from a First seen on…
-
Court rejects Home Office bid for blanket secrecy in hearings over Apple encryption case
Investigatory Powers Tribunal rejects Home Office arguments that identifying the ‘bare details’ of legal action by Apple would damage national security, leaving open possibility of future open court hearings First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366622253/Court-rejects-Home-Office-bid-for-blanket-secrecy-in-hearings-over-Apple-encryption-case
-
Home Office haunted by 25-year-old asylum system
Tags: office‘Full benefit’ of replacement will not be realized until old one is shut down, projects watchdog warns First seen on theregister.com Jump to article: www.theregister.com/2025/04/04/home_office_asylum_system/
-
UK Home Office Ransom Ban Proposal Needs More Clarity
Cybersecurity Wonks Find Fault With Home Office Ransomware Proposals. A collection of British cybersecurity policy wonks poured cold water over a British government proposal to outlaw ransom payments by government agencies and from regulated operators of critical infrastructure. A ban wouldn’t likely represent a significant blow to ransomware profits. First seen on govinfosecurity.com Jump to…
-
Poland’s prime minister says cyberattack targeted his party as election nears
An official within the prime minister’s office said the attackers attempted to take control of computers belonging to both party employees and election staff. First seen on therecord.media Jump to article: therecord.media/poland-prime-minister-cyber-targeted
-
Mozilla is rolling Thundermail, a Gmail, Office 365 rival
Thunderbirds are Pro: Open-source email client to get message hosting, appointment scheduling, more First seen on theregister.com Jump to article: www.theregister.com/2025/04/02/thunderbird_pay_services/
-
Canon Printer Flaw Enables Remote Code Execution
Critical Vulnerability in Drivers Affects Multiple Canon Printers. The office printer could mete out more than ordinary frustration now that researchers discovered a vulnerability in drivers for Canon printer enabling attackers to execute arbitrary code. The flaw is an out-of-bounds vulnerability in Enhanced Metafile Recode processing. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/canon-printer-flaw-enables-remote-code-execution-a-27894
-
Apple devices are at ‘most risk’ in UK following government ‘backdoor’ order
Home Office refuses to answer questions from Lords over technical capability notice issued against Apple’s iCloud Advanced Data Protection encryption services First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366621785/Apple-devices-are-at-most-risk-in-UK-following-government-backdoor-order
-
7 Wege, Daten (besser) zu verschlüsseln
Tags: ai, blockchain, business, crypto, dns, encryption, github, healthcare, infrastructure, nist, office, privacy, software, updateVerschlüsseln Sie Ihre Daten zeitgemäß?Das Konzept der Kryptografie existiert schon ein paar Hundert Jahre, wird aber von findigen Wissenschaftlern und Mathematikern immer weiter vorangetrieben. Im Rahmen dieser Entwicklungsarbeit hat sich gezeigt, dass Algorithmen noch viel mehr können, als nur Daten zu schützen: Sie sind auch in der Lage, komplexe Regeln durchzusetzen und die Zusammenarbeit zu…
-
Canon CVE-2025-1268 Vulnerability: A Buffer Overflow Threatening Printer Security
Canon Marketing Japan Inc. and Canon Inc. have issued an important security update regarding a vulnerability in certain printer drivers. This Canon vulnerability, identified as CVE-2025-1268, affects a range of Canon printer models, including production printers, office multifunction devices, and small office multifunction devices. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/canon-printer-vulnerability-cve-2025-1268/
-
FBI and DOJ seize $8.2 Million in romance baiting crypto fraud scheme
The U.S. DOJ seized over $8.2 million in USDT stolen through ‘romance baiting’ scams, where victims are tricked into fake investments promising high returns. On February 27, 2025, the U.S. Attorney’s Office in Ohio filed a civil forfeiture complaint for $8.2M in USDT (Tether) linked to a ‘romance baiting’ scam. Fraudsters used anonymous messaging apps…
-
CISA Budget Cuts Weaken US Election Security, Officials Warn
State and Local Election Offices Face Growing Cyber Threat Amid Federal Budget Cuts. Top-ranking current and former security officials warned Thursday that President Donald Trump’s budget cuts to the Cybersecurity and Infrastructure Security Agency and other election security efforts have left U.S. election infrastructure vulnerable to escalating cyber threats. First seen on govinfosecurity.com Jump to…
-
New Windows scheduled task will launch Office apps faster
In May, Microsoft plans to roll out a new Windows scheduled task that launches automatically to help Microsoft Office apps load faster. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-new-windows-scheduled-task-will-launch-office-apps-faster/
-
7 cutting-edge encryption techniques for reimagining data security
Tags: ai, computer, cryptography, data, dns, encryption, government, ibm, identity, nist, office, privacy, risk, software, technology, trainingPrivate information retrieval: Securing a database is fairly straightforward. Protecting the privacy of the users, however, is a bit more difficult. Private information retrieval algorithms make it possible for people to search the database for specific blocks of data without revealing too much to the database owner.This extra layer of protection relies on scrambling larger…
-
Top 3 MS Office Exploits Hackers Use in 2025 Stay Alert!
Hackers have long used Word and Excel documents as delivery vehicles for malware, and in 2025, these tricks are far from outdated. From phishing schemes to zero-click exploits, malicious Office files are still one of the easiest ways into a victim’s system.Here are the top three Microsoft Office-based exploits still making the rounds this year…
-
UK fines software provider £3.07 million for 2022 ransomware breach
The UK Information Commissioner’s Office (ICO) has fined Advanced Computer Software Group Ltd £3.07 million over a 2022 ransomware attack that exposed the sensitive personal data of 79,404 people, including National Health Service (NHS) patients. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/uk-fines-software-provider-307-million-for-2022-ransomware-breach/
-
2 in 5 techies quit over inflexible workplace policies
Tags: officeReturn to office, hours and intensity of work cited as reasons to walk First seen on theregister.com Jump to article: www.theregister.com/2025/03/24/2_in_5_techies_quit/
-
FBI Warns Against Using Unsafe File Converter Tools
The FBI Denver Field Office has sounded the alarm about a burgeoning scam involving purportedly free online document converter tools. This scam, which has gained traction globally, sees cybercriminals harnessing these tools to spread malware, leading to severe consequences such as ransomware attacks. The FBI is urging the public to remain vigilant and report any…
-
Virginia Attorney General’s Office purportedly breached by Cloak ransomware
First seen on scworld.com Jump to article: www.scworld.com/brief/virginia-attorney-generals-office-purportedly-breached-by-cloak-ransomware
-
FBI Warns of Document Converter Tools Due to Uptick in Scams
The FBI’s Denver field office says the tools will convert documents while also dropping malware and scraping users’ systems for sensitive data. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/fbi-document-converter-tools-scam
-
Secure by Design Must Lead Software Development
Tags: awareness, cybersecurity, defense, office, open-source, programming, risk, software, supply-chainCrossley of Schneider Electric Urges Supplier Scrutiny and Continuous Risk Review. To strengthen defenses, organizations must adopt secure-by-design practices, select mature open-source components and embed risk awareness throughout development, according to Cassie Crossley, vice president, supply chain security, cybersecurity and product security office, Schneider Electric. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/secure-by-design-must-lead-software-development-a-27811
-
24th March Threat Intelligence Report
Municipalities in four US states experienced cyberattacks that disrupted services for county offices, courts, and schools. Cleveland Municipal Court was hit by Qilin ransomware attack, forcing employees offline and delaying trials, while […] First seen on research.checkpoint.com Jump to article: research.checkpoint.com/2025/24th-march-threat-intelligence-report/