Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security vulnerability exists in Microsoft Office. The following products and editions are...

Microsoft Office PowerPoint 安全漏洞

Microsoft Office PowerPoint is a software used to create, presentations PPT by Microsoft Corporation USA. A security vulnerability exists in Microsoft Office PowerPoint. The following products and editions are affected:Microsoft PowerPoint 2013 Service Pack 1 64-bit editions,Microsoft PowerPoint...

Veeam Backup for Microsoft 365 5b cumulative patch KB4124

This patch is superseded by Veeam Backup for Microsoft 365 5b cumulative patch KB4158 Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 5.0.1.179 prior to installing this cumulative patch KB4124. You can check this under Help and Support About in Veeam Backup for...

XLM + AMSI: New runtime defense against Excel 4.0 macro malware

We have recently expanded the integration of Antimalware Scan Interface AMSI with Office 365 to include the runtime scanning of Excel 4.0 XLM macros, to help antivirus solutions tackle the increase in attacks that use malicious XLM macros. This integration, an example of the many security feature...

Microsoft unifies SIEM and XDR to help stop advanced attacks

For all of us in security, the last twelve months have been an incredible series of challenges—from balancing remote work with family priorities, to helping build resilient businesses, and protecting against the latest attacks. 2020 showed us that while we have made great progress, there is still...

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office software packages, and Microsoft 365 apps, as well as Microsoft Office Web Apps and Office Online Server, stems from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office software packages, Microsoft 365 apps, Microsoft Office Web Apps, and Office Online Server is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Build Numbers and Versions of Veeam Backup for Microsoft 365

This KB article lists all versions of Veeam Backup for Microsoft 365 and their respective build numbers. For more information on downloading the latest version of Veeam Backup for Microsoft 365, visit: Veeam Backup for Microsoft 365 -- Current Version Download Page Veeam Backup for Microsoft 365 ...

Veeam Backup for Microsoft 365 retention policy miscalculation causing data loss

Challenge When you have deployed Veeam Backup for Microsoft 365, use snapshot-based retention and storing data on a Jet Database-based repository then your solution might mistakenly remove restore points of Exchange data that are still valid. This applies to versions 5.0 Day 0 Update and earlier...

Web shell attacks continue to rise

One year ago, we reported the steady increase in the use of web shells in attacks worldwide. The latest Microsoft 365 Defender data shows that this trend not only continued, it accelerated: every month from August 2020 to January 2021, we registered an average of 140,000 encounters of these threa...

Web shell attacks continue to rise

One year ago, we reported the steady increase in the use of web shells in attacks worldwide. The latest Microsoft 365 Defender data shows that this trend not only continued, it accelerated: every month from August 2020 to January 2021, we registered an average of 140,000 encounters of these threa...

Veeam Backup for Microsoft 365 4c cumulative patch KB4099

This patch supersedes Veeam Backup for Microsoft 365 4c cumulative patch KB4083. Requirements Please confirm you are running Veeam Backup for Microsoft 365 version 4c builds 4.0.1.531, 4.0.1.545, 4.0.1.612 prior to installing this cumulative patch KB4099. You can check this under Help and Support...

Microsoft Excel Resource Management Error Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Excel. The following products and editions are affected:Microsoft Office Web Apps Server 2013 Service Pack 1,Office Online...

Veeam Backup for Microsoft 365 Upgrade Paths

Shared Server with Veeam Backup & Replication If Veeam Backup & Replication is installed on the same server as Veeam Backup for Microsoft 365, upgrade Veeam Backup for Microsoft 365 before upgrading Veeam Backup & Replication. Shared Server Compatibility of Veeam Backup for Microsoft 365 and Veea...

Microsoft Excel Resource Management Error Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Excel. The following products and editions are affected:Microsoft Office Web Apps Server 2013 Service Pack 1,Office Online...

Why threat protection is critical to your Zero Trust security strategy

The corporate network perimeter has been completely redefined. Many IT leaders are adopting a Zero Trust security model where identities play a critical role in helping act as the foundation of their modern cybersecurity strategy. As a result, cybercriminals have shifted their focus and identitie...

The vulnerability of Microsoft Excel, Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps relates to insufficient input validation, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel, the Microsoft Office suite, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to...

Metasploit Wrap-Up

Baron Samedit is coming to get you Last week, a critical bug in sudo came out and could potentially affect most of the Linux-based operating systems, since this tool is usually installed by default. This vulnerability is identified as CVE-2021-3156, but better known as "Baron Samedit", and is...

Microsoft Office 365 Attacks Sparked from Google Firebase

A phishing campaign bent on stealing Microsoft login credentials is using Google Firebase to bypass email security measures in Microsoft Office 365, researchers said. Researchers at Armorblox uncovered invoice-themed emails sent to at least 20,000 mailboxes that purport to share information about...

Microsoft 365 Becomes Haven for BEC Innovation

Two fresh business email compromise BEC tactics have emerged onto the phishing scene, involving the manipulation of Microsoft 365 automated email responses in order to evade email security filters. In one case, scammers are targeting victims by redirecting legitimate out-of-office OOO replies fro...

Mimecast Confirms SolarWinds Hack as List of Security Vendor Victims Snowball

The Mimecast certificate compromise reported earlier in January is part of the sprawling SolarWinds supply-chain attack, the security firm has confirmed. Mimecast joins other cybersecurity vendors like CrowdStrike, Fidelis, FireEye, Malwarebytes, Palo Alto Networks and Qualys in being targeted in...