Category Archives: Office 365

Weakness in Microsoft Office 365 Message Encryption could expose email contents

Posted on by

WithSecure researchers are warning organizations of a security weakness in Microsoft Office 365 Message Encryption (OME) that could be exploited by attackers to obtain sensitive information. OME, which is used by organizations to send encrypted emails … Continue reading Weakness in Microsoft Office 365 Message Encryption could expose email contents→

Office exploits continue to spread more than any other category of malware

Posted on by

The latest Internet Security Report from the WatchGuard Threat Lab shows a reduction in overall malware detections from the peaks seen in the first half of 2021, along with an increase in threats for Chrome and Microsoft Office and the ongoing Emotet b… Continue reading Office exploits continue to spread more than any other category of malware→

Escanor malware delivered in weaponized Microsoft Office documents

Posted on by

Resecurity, a Los Angeles-based cybersecurity company protecting Fortune 500 worldwide, identified a new RAT (Remote Administration Tool) advertised in Dark Web and Telegram called Escanor. The threat actors offer Android-based and PC-based versions of… Continue reading Escanor malware delivered in weaponized Microsoft Office documents→

How to prepare your organization for a Slack or Office 365 breach

Posted on by

Whether it’s Slack or Office 365, communication and workflow apps are an essential tool for organizations to collaborate efficiently regardless of geography. However, using any of these as a primary communication channel, replacing email and knowledge … Continue reading How to prepare your organization for a Slack or Office 365 breach→

Phishers steal Office 365 users’ session cookies to bypass MFA, commit payment fraud

Posted on by

A massive phishing campaign has been targeting Office 365 (i.e., Microsoft 365) users in over 10,000 organizations since September 2021 and successfully bypassing multi-factor authentication (MFA) set up to protect the accounts. The attackers use proxy… Continue reading Phishers steal Office 365 users’ session cookies to bypass MFA, commit payment fraud→