Microsoft Office Zeorday CVE-2024-38200

Microsoft Office Zeorday CVE-2024-38200

Microsoft has disclosed the details of an unpatched zero-day in office that could result in unauthorized disclosure of sensitive information to malicious actors. The vulnerability, tracked as CVE-2024-38200 with a…
Escanor Remote Access Trojan in action

Escanor Remote Access Trojan in action

A new RAT has been seen on the dark web weaponizing Microsoft Office and Adobe PDF documents to deliver malicious code, dubbed Escanor. The threat actors offer Android-based and PC-based…
Homograph Attack Warning

Homograph Attack Warning

Researchers have delivered an urgent warning to Microsoft Office users about homograph attacks, that results in data breach Homograph attacks misuse similar-looking characters to deceive users. The difference is slight,…
Chinese APT exploits Follina

Chinese APT exploits Follina

China-backed hackers are exploiting an unpatched Microsoft Office zero-day vulnerability, known as “Follina”, to execute malicious code remotely on Windows systems. Microsoft has warned that the flaw could enable threat…

Follina Mitigation Details Emerges

According to Microsoft, administrators can preempt attacks exploiting CVE-2022-30190 by disabling the MSDT protocol. This stops malicious actors from launching troubleshooters and from executing code on vulnerable systems. The process…
Follina ZeroDay evades Microsoft Defender

Follina ZeroDay evades Microsoft Defender

Hackers are exploiting a vulnerability in Microsoft Office that enables them to fetch malicious code without detection in a multi-stage attack. The exploit, dubbed named Follina, abuses the remote template…