Security News > 2017 > April > Beware of an Unpatched Microsoft Word 0-Day Flaw being Exploited in the Wild (The Hackers News)

2017-04-09 05:16
It's 2017, and opening a simple MS Word file could compromise your system. Security researchers are warning of a new in-the-wild attack that silently installs malware on fully-patched computers by exploiting a serious — and yet unpatched — zero-day vulnerability in all current versions of Microsoft Office on fully-patched PCs. The Microsoft Office zero-day attack, uncovered by researchers
News URL
http://feedproxy.google.com/~r/TheHackersNews/~3/JYsg9d5cQ8o/microsoft-word-zero-day.html
Related news
- Week in review: Microsoft patches exploited Windows CLFS 0-day, WinRAR MotW bypass flaw fixed (source)
- Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp (source)
- Hackers abuse OAuth 2.0 workflows to hijack Microsoft 365 accounts (source)
- Hackers exploit VMware ESXi, Microsoft SharePoint zero-days at Pwn2Own (source)
- Week in review: Microsoft patches 5 actively exploited 0-days, recently fixed Chrome vulnerability exploited (source)
- Russia-Linked Hackers Target Tajikistan Government with Weaponized Word Documents (source)
- Russian Hackers Breach 20+ NGOs Using Evilginx Phishing via Fake Microsoft Entra Pages (source)