Tag: office
-
ESET Uncovers Zero-Day Vulnerabilities in WPS Office, Exploited by APT-C-60
ESET researchers have identified two severe vulnerabilities in WPS Office for Windows, widely exploited by the APT-C-60 cyberespionage group, which is… First seen on securityonline.info Jump to article: securityonline.info/eset-uncovers-zero-day-vulnerabilities-in-wps-office-exploited-by-apt-c-60/
-
APT group exploits WPS Office for Windows RCE vulnerability (CVE-2024-7262)
ESET researchers discovered a remote code execution vulnerability in WPS Office for Windows (CVE-2024-7262). APT-C-60, a South Korea-aligned cyberespi… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/28/cve-2024-7262-cve-2024-7263/
-
Quishing Campaign Abuses Microsoft Sway to Host Phishing Pages
Threat actors are abusing the Microsoft Sway service to host phishing pages leveraged in QR phishing attacks targeting Office 365 users. The post Quis… First seen on securityweek.com Jump to article: www.securityweek.com/quishing-campaign-abuses-microsoft-sway-to-host-phishing-pages/
-
Data Breaches in the USA in June 2024: 10,527,091 People Impacted
Analyzing the Maine Attorney General’s data For June 2024, IT Governance USA’s analysis of the Office of the Maine Attorney General’s data breach noti… First seen on itgovernanceusa.com Jump to article: www.itgovernanceusa.com/blog/data-breaches-in-the-usa-in-june-2024-10527091-people-impacted
-
WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies
A WPS Office zero-day vulnerability tracked as CVEâ -â 2024â -â 7262 was exploited by South Korean hacker group APT-C-60. The post WPS Office Zero… First seen on securityweek.com Jump to article: www.securityweek.com/wps-office-zero-day-exploited-by-south-korea-linked-cyberspies/
-
Datenschutzfunktionen von Microsoft-365 reichen nicht aus
Nach Angaben von Microsoft nutzen weltweit mehr als 85 Millionen Menschen Microsoft-365 . Die bekannte Office-Suite bietet seinen Anwendern wichtige S… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/08/20/datenschutzfunktionen-von-microsoft-365-reichen-nicht-aus/
-
Audit finds notable security gaps in FBI’s storage media management
Tags: officeAn audit from the Department of Justice’s Office of the Inspector General (OIG) identified significant weaknesses in FBI’s inventory management and di… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/audit-finds-notable-security-gaps-in-fbis-storage-media-management/
-
White House mandates stricter cybersecurity for RD institutions
Federal cyber regulation is edging further into research and development (R&D) and higher education. A recent memo from the Office of Science and Tech… First seen on securityintelligence.com Jump to article: securityintelligence.com/news/white-house-mandates-stricter-cybersecurity-for-research-and-development/
-
From Offices to Hotels: Backdoor in Contactless Key Cards Enables Mass Cloning
First seen on hackread.com Jump to article: hackread.com/contactless-key-cards-backdoor-enables-mass-cloning/
-
Backdoor in RFID Cards for Offices, Hotels Can Lead to Instant Cloning
A backdoor found in millions of Chinese-made RFID cards that are used by hotels and other businesses around the world can let bad actors instantly clo… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/backdoor-in-rfid-cards-for-offices-hotels-can-lead-to-instant-cloning/
-
Microsoft Office reißt Sicherheitslücke in macOS – nur zwei Programme gepatcht
Word, Outlook, PowerPoint, OneNote, Excel, Teams: Problematischer Code in den macOS-Versionen konnte laut Cisco Talos Apples Sicherheitsmodell komprom… First seen on heise.de Jump to article: www.heise.de/news/Microsoft-Office-reisst-Sicherheitsluecke-in-macOS-nur-zwei-Programme-gepatcht-9840679.html
-
Patchday Microsoft: Angreifer attackieren Office und Windows mit Schadcode
First seen on heise.de Jump to article: www.heise.de/news/Patchday-Microsoft-Angreifer-attackieren-Office-und-Windows-mit-Schadcode-9834085.html
-
The i-Soon Leaks: Germany’s BfV Exposes the Industrialization of Chinese Cyber Espionage
A newly released report from Germany’s Federal Office for the Protection of the Constitution (BfV) unveils insights into the operations of the Chinese… First seen on securityonline.info Jump to article: securityonline.info/the-i-soon-leaks-germanys-bfv-exposes-the-industrialization-of-chinese-cyber-espionage/
-
Microsoft Office Updates (13. August 2024)
Am 13. August 2024 (zweiter Dienstag im Monat, Microsoft Patchday) hat Microsoft mehrere sicherheitsrelevante Updates für Microsoft Office 2016, sowie… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/15/microsoft-office-updates-13-august-2024/
-
MicrosoftProdukte rissen Sicherheitslücke in macOS
Word, Outlook, PowerPoint, OneNote, Excel, Teams: Problematischer Code in den macOS-Versionen konnte laut Cisco Talos Apples Sicherheitsmodell komprom… First seen on heise.de Jump to article: www.heise.de/news/Office-Produkte-von-Microsoft-Luecken-hebelten-macOS-Systemsicherheit-aus-9840679.html
-
Week in review: MS Office flaw may leak NTLM hashes, malicious Chrome, Edge browser extensions
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Unpatched MS Office flaw may leak NTLM hashes to att… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/18/week-in-review-ms-office-flaw-may-leak-ntlm-hashes-malicious-chrome-edge-browser-extensions/
-
Russian Midnight Blizzard Breached UK Home Office via Microsoft
First seen on hackread.com Jump to article: hackread.com/russia-midnight-blizzard-breach-uk-home-office-microsoft/
-
Microsoft Security Update Summary (13. August 2024)
Am 13. August 2024 hat Microsoft Sicherheitsupdates für Windows-Clients und -Server, für Office sowie für weitere Produkte veröffentlicht. Die Sicher… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/14/microsoft-security-update-summary-13-august-2024/
-
Kentucky county’s clerk’s office breached in RansomHub attack
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/kentucky-countys-clerks-office-breached-in-ransomhub-attack
-
Warnung vor Microsoft Office Spoofing-Schwachstelle CVE-2024-38200
Microsoft hat zum 8. August 2024 (mit Update vom 10. August 2024) eine Warnung von einer ungepatchten Spoofing-Schwachstelle CVE-2024-38200 veröffentl… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/08/12/warnung-vor-microsoft-office-spoofing-schwachstelle-cve-2024-38200/
-
Telegram Bot Selling Phishing Tools to Bypass 2FA Hack Microsoft 365 Accounts
A newly discovered phishing marketplace, ONNX Store, empowers cybercriminals to launch sophisticated attacks against Microsoft 365 and Office 365 envi… First seen on gbhackers.com Jump to article: gbhackers.com/telegram-bot-selling-phishing-tools/
-
Unpatched MS Office flaw may leak NTLM hashes to attackers (CVE-2024-38200)
A new MS Office zero-day vulnerability (CVE-2024-38200) can be exploited by attackers to grab users’ NTLM hashes, Microsoft has shared late last week…. First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/08/12/cve-2024-38200/
-
Microsoft discloses unpatched Office flaw that exposes NTLM hashes
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-discloses-unpatched-office-flaw-that-exposes-ntlm-hashes/
-
Microsoft discloses Office zero-day, still working on a patch
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-discloses-office-zero-day-still-working-on-a-patch/
-
Microsoft 365 Vulnerability Let Hackers Bypass Anti-phishing Feature
A vulnerability in Microsoft 365 (formerly Office 365) has been found that allows malicious actors to bypass anti-phishing measures. One of the anti-p… First seen on gbhackers.com Jump to article: gbhackers.com/microsoft-365-phishing-bypass/
-
UK IT provider faces $7.7 million fine for 2022 ransomware breach
The UK’s Information Commissioner’s Office (ICO) has announced a provisional decision to impose a fine of £6.09M ($7.74 million) on Advanced Computer … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/uk-it-provider-faces-77-million-fine-for-2022-ransomware-breach/
-
Implement MFA or Risk Non-Compliance With GDPR
The UK Information Commissioner’s Office announced its intention to fine Advanced Computer Software Group £6.09 million. The post Implement MFA or Ris… First seen on securityweek.com Jump to article: www.securityweek.com/implement-mfa-or-risk-non-compliance-with-gdpr/
-
Microsoft 365 anti-phishing feature can be bypassed with CSS
Researchers have demonstrated a method to bypass an anti-phishing measure in Microsoft 365 (formerly Office 365), elevating the risk of users opening … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-365-anti-phishing-feature-can-be-bypassed-with-css/