Security News

Microsoft pulls fix for Outlook bug behind ICS security alerts
2024-04-23 21:50

Microsoft has rolled back a fix for a known Outlook issue that was causing incorrect security alerts when opening ICS calendar files after installing the December Outlook Desktop security updates. Affected Microsoft 365 users are seeing unexpected warnings that "Microsoft Office has identified a potential security concern" and that "This location may be unsafe" when double-clicking ICS files saved on their devices.

Microsoft fixes Outlook security alerts bug caused by December updates
2024-04-04 19:14

Microsoft has fixed an issue that triggers erroneous Outlook security alerts when opening. ICS calendar files after installing the December 2023 Outlook Desktop security updates.

Surveillance by the New Microsoft Outlook App
2024-04-04 11:07

This is applications, so it is not because I've nuked state in a browser. It is applications for services for which I am paying money.

Microsoft warns Gmail blocks some Outlook email as spam, shares fix
2024-04-02 22:09

Microsoft has confirmed that some Outlook.com users are experiencing issues with emails being blocked and marked as spam when trying to email Gmail accounts. Until the Outlook.com Team can address this newly acknowledged issue, Microsoft advises impacted users to add an Outlook.com alias to their accounts and email Gmail contacts using that alias.

Microsoft fixes Outlook clients not syncing over Exchange ActiveSync
2024-03-01 16:05

Microsoft has fixed an issue causing some Microsoft 365 users' Outlook desktop clients to stop connecting to email servers via Exchange ActiveSync. Exchange ActiveSync is a synchronization protocol used by Microsoft Exchange to allow users to access their email, calendar, contacts, and tasks.

New critical Microsoft Outlook RCE bug is trivial to exploit
2024-02-14 20:08

Microsoft says remote unauthenticated attackers can trivially exploit a critical Outlook security vulnerability that also lets them bypass the Office Protected View.Unauthenticated attackers can exploit CVE-2024-21413 remotely in low-complexity attacks that don't require user interaction.

Microsoft: New critical Outlook RCE bug exploited as zero-day
2024-02-14 20:08

Microsoft updated a security advisory today to warn that a critical Outlook bug was exploited in attacks as a zero-day before being fixed during this month's Patch Tuesday. Unauthenticated attackers can exploit CVE-2024-21413 remotely in low-complexity attacks that don't require user interaction.

2024 cybersecurity outlook: A wave of global threats on the horizon
2024-02-12 04:00

2024 is expected to witness a surge in cyberattacks driven by global events and the widespread accessibility of advanced technologies. In this Help Net Security round-up, we present segments from previously recorded videos where cybersecurity experts discuss predictions for 2024, providing a comprehensive perspective on the challenges and opportunities awaiting organizations.

Microsoft: Outlook clients not syncing over Exchange ActiveSync
2024-02-09 17:57

Microsoft warned Outlook for Microsoft 365 users that clients might have issues connecting to email servers via Exchange ActiveSync after a January update."After updating to Version 2401 Build 17231.20182 Outlook stops connecting when using the Exchange ActiveSync protocol," Microsoft said.

Microsoft Outlook December updates trigger ICS security alerts
2024-02-05 22:03

Microsoft is investigating an issue that triggers Outlook security alerts when trying to open. ICS calendar files after installing December 2023 Patch Tuesday Office security updates.