Top 10 most exploited vulnerabilities list released by FBI, DHS CISA

The agencies say it’s vital to prioritize patching. Otherwise, we’re making it easy for attackers who don’t have to work at finding 0 days. Continue reading Top 10 most exploited vulnerabilities list released by FBI, DHS CISA

Attackers Test New Document Attack Vector That Slips Past Office Defenses

After abusing Microsoft Office macros, Dynamic Data Exchange (DDE) and Object Linking and Embedding (OLE), attackers have found a new document feature they can leverage to execute malicious code on computers. The new attack vector was first documented… Continue reading Attackers Test New Document Attack Vector That Slips Past Office Defenses

Microsoft Patches 17-Year-Old Office Bug

Researchers warn of a Microsoft remote code execution bug that has persisted for 17 years in Office, leaving the OS unprotected until the vulnerability was patched Tuesday. Continue reading Microsoft Patches 17-Year-Old Office Bug

Attackers Use Undocumented MS Office Feature to Leak System Profile Data

An undocumented Microsoft Office feature allows for spying via specially crafted Word documents—no macros, exploits or any other active content needed. Continue reading Attackers Use Undocumented MS Office Feature to Leak System Profile Data