Microsoft Outlook Warning: Critical New Email Exploit Triggers Automatically
1–10 of 12 posts
Re: Microsoft Outlook Warning: Critical New Email Exploit Triggers Automatically
#2Should we kill Outlook and use web based O365 until a patch is released?
O365 web based mail has been pretty good for a while now compared with Outlook if you're in the MS ecosystem. I might just make the switch now and see how I get on.
Re: Microsoft Outlook Warning: Critical New Email Exploit Triggers Automatically
#3"Google-owned threat intelligence company, Mandiant, says that it believes the CVE-2023-23397 Microsoft Outlook zero-day vulnerability has been exploited for nearly a year in order to target both organizations and critical infrastructure."
Nearly a year, very nice. Adding to the list of reasons why I hate outlook.
Re: Microsoft Outlook Warning: Critical New Email Exploit Triggers Automatically
#4Should we kill Outlook and use web based O365 until a patch is released? O365 web based mail has been pretty good for a while now compared with Outlook if you're in the MS ecosystem. I might just make the switch now and see how I get on.
Personally I agree with this with the addition of O365 and we go back to text only email :)
But unfortunately, doing that would cause lots of issues for many Companies and Marketers. IBM Notes is still being sold by a company in India, I wonder if that could be an alternative. I doubt there are any/many security issues with that due to how hard it is to setup.
Re: Microsoft Outlook Warning: Critical New Email Exploit Triggers Automatically
#5If I’m reading the CVE correctly, this could be used for privilege escalation?
Re: Microsoft Outlook Warning: Critical New Email Exploit Triggers Automatically
#6Should we kill Outlook and use web based O365 until a patch is released? O365 web based mail has been pretty good for a while now compared with Outlook if you're in the MS ecosystem. I might just make the switch now and see how I get on.
Article said a patch was released tuesday
Re: Microsoft Outlook Warning: Critical New Email Exploit Triggers Automatically
#7If I’m reading the CVE correctly, this could be used for privilege escalation?
It is privilege escalation. Used in NTLM relay attacks.
Re: Microsoft Outlook Warning: Critical New Email Exploit Triggers Automatically
#8Should we kill Outlook and use web based O365 until a patch is released? O365 web based mail has been pretty good for a while now compared with Outlook if you're in the MS ecosystem. I might just make the switch now and see how I get on.
You’ll be fine. I got a new MacBook in late 2019. I never installed the Outlook client and use my work mail exclusively via O365 client and my phone. I’ve never felt like I wanted to install the client.
Re: Microsoft Outlook Warning: Critical New Email Exploit Triggers Automatically
#9TLDR: "Alternatively, you can block outbound TCP 445/SMB using a firewall or through VPN settings."
Simple and easy: don't allow TCP 445 outside your LAN
Re: Microsoft Outlook Warning: Critical New Email Exploit Triggers Automatically
#10Should we kill Outlook and use web based O365 until a patch is released? O365 web based mail has been pretty good for a while now compared with Outlook if you're in the MS ecosystem. I might just make the switch now and see how I get on.
Personally I agree with this with the addition of O365 and we go back to text only email :) But unfortunately, doing that would cause lots of issues for many Companies and Marketers. IBM Notes is still being sold by a company in India, I wonder if that could be an alternative. I doubt there are any/many security issues with that due to how hard it is to setup.
> But unfortunately, doing that would cause lots of issues for many Companies and Marketers.
What’s the unfortunate part in that?