New Zero-Click Outlook RCE Exploits Revealed

Two newly discovered security flaws in Microsoft Windows could allow threat actors to achieve remote code execution on Outlook clients without any user interaction. The first vulnerability, CVE-2023-35384, is a bypass of a critical security flaw patched in March 2023, which could result in the theft of NTLM credentials and enable an attacker to conduct a relay attack. The second vulnerability, CVE-2023-36710, is an integer overflow vulnerability in the Audio Compression Manager (ACM) component, which could be exploited to download a custom sound file that, when autoplayed using Outlook's reminder sound feature, can lead to a zero-click code execution on the victim machine. To mitigate the risks, organizations are advised to use microsegmentation.

Related reads

Popular posts from this blog

Meta CTO Reveals Latest Updates on AR Glasses: AI-Powered and Beyond!

Meta is working on developing immersive augmented reality (AR) glasses that could potentially replace smartphones. These glasses are designed to be cost-effective and integrate AI, with the goal of making them accessible to everyone. The company is currently working on prototypes for 2024, 2026, and 2028, with the aim of releasing the glasses by the end of the decade. One of the main challenges is creating displays that are both clear and high-quality yet cost-effective. Additionally, the company is working on manufacturing new materials for the glasses and finding ways to give them enough power without needing frequent charging. AI is expected to make the glasses more useful than anticipated, and could help with tradeoffs on other parts of the design. The article highlights the significance of AI in product roadmaps, including those of Meta, and how it is becoming a primary way people interact with machines. Related reads Larry Magid: Meta, Ray-Ban release second-generation smart gla...
Read more

GTA 6: The Most Anticipated Game Release in History?

The games industry is currently facing challenges such as cost-cutting measures, layoffs, studio closures, and game cancellations. However, the upcoming release of Grand Theft Auto 6 (GTA 6) is highly anticipated and expected to be a major success, with some analysts predicting it could be the best-selling video game of all time. The game's release is seen as critical for the video game industry, which is currently experiencing a decline in revenue and growth. GTA 6 has the potential to boost the bottom line of companies involved in the video game industry, including retailers like Amazon and GameStop, as well as console manufacturers like Sony and Microsoft. The game's success could also lead to increased interest in video games and gaming overall, potentially leading to a renewed growth period for the industry. However, the development of GTA 6 has been marred by reports of crunch and other issues within Rockstar Games, highlighting the challenges faced by developers in the i...
Read more

Google Unveils Revolutionary Password Security Feature for iPhone Users

Google has recently upgraded the security protection for iPhone users by introducing a new real-time system for detecting and warning users about unsafe websites in Chrome. This new system replaces the current local list-based system and includes flagging weak and reused passwords, blocking 25% more phishing attempts, and providing real-time protection against risky websites on Chrome for desktop, iOS, and soon Android. The new system uses an asynchronous mechanism to prevent network calls from blocking page loads and degrades the user experience, and it also includes an option to turn it off in the browser settings. Additionally, Google has partnered with Fastly, a CDN and edge computing specialist, to provide an additional layer of privacy by stripping out any identifying information from the browser request. The new system is currently available in Chrome's Standard mode and offers additional protection in Enhanced mode, including AI-based blocking, deep file scans, and protecti...
Read more