Page 6 - Protected View News Today

Actively exploited flaw allows attackers to use malicious Word documents to perform remote code execution through Microsoft Support Diagnostic Tool.

The high-severity vulnerability affects 41 Microsoft products, including Office 365 and Windows 11. China-backed hackers are attacking the unpatched version of Microsoft Office's zero-day vulnerability, which is called "Follina," and carrying out malicious code remotely on various Windows systems.

Word attack is possible even with macros turned off, no patch yet available

Microsoft has shared mitigation measures to block attacks exploiting a newly discovered Microsoft Office zero-day flaw abused in the wild to execute malicious code remotely.

The actively exploited flaw allows attackers to use malicious Word documents to perform remote code execution through Microsoft Support Diagnostic Tool.

"Follina" vulnerability in Microsoft Support Diagnostic Tool (MSDT) affects all currently supported Windows versions and can be triggered via specially crafted Office documents.

Microsoft has released workarounds for a newly discovered zero-day vulnerability in its Office productivity suite that is being exploited in the wild

Security researchers have discovered a new Microsoft Office zero-day vulnerability that is being used in attacks to execute malicious PowerShell commands via Microsoft Diagnostic Tool (MSDT) simply by opening a Word document.

Cybersecurity researchers have discovered a new zero-day bug in Microsoft Office that could be exploited to execute arbitrary code on affected Windows

Malware loads itself from remote servers and bypasses Microsoft's Defender AV scanner, according to reports.