Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

<ul><li><keyword id="10387" type="General" weightage="100" keywordseo="microsoft" source="Orion">Microsoft</keyword> Confirms ‘<keyword id="14077881" type="General" weightage="80" keywordseo="follina" source="Orion">Follina</keyword>’ vulnerability in <keyword id="6369149" type="General" weightage="20" keywordseo="Microsoft-Office" source="Orion">Microsoft Office</keyword></li><li>Researchers suggest that the Follina <keyword id="13182919" type="General" weightage="20" keywordseo="zero-day-vulnerability" source="Orion">zero-day vulnerability</keyword> has also impacted Office 2013 version.</li><li>Instead of a security patch, Microsoft has released guidance to cope with Follina - read below.</li></ul>The independent research group named <a href="https://nao-sec.org/">nao_sec </a>has identified a new <a href="https://www.trendmicro.com/vinfo/us/security/definition/zero-day-vulnerability">zero-day vulnerability </a>in Microsoft Office that allows hackers to execute a code using an infected Word document. The security issue is known as Follina which hits the user system when they open malicious Word files. <div type="twitter" handle="nao_sec" handlename="nao_sec" image="http://pbs.twimg.com/profile_images/930817201476534272/pFzs4Bqo_normal.jpg" favoritecount="1636" retweetcount="632" status="Interesting maldoc was submitted from Belarus. It uses Word's external link to load the HTML and then uses the &quot;ms-… https://t.co/YGtzXnBPjb" createdat="1653662332000" id="1530196847679401984"></div>The Tokyo based cybersecurity research organization revealed the Follina vulnerability on their Twitter handle. According to the tweet, the security lapse is allowing Microsoft Word file to execute code - Follina even if Macros is disabled as it is used to give commands for automated tasks. Meanwhile, hackers are using vulnerability for similar automation with Macros. On Monday, Microsoft Security Response Center responded on Office vulnerabilities and said, if a hacker exploits this vulnerability, they can install programs or applications and exploit, view or delete data. Further, they can also create new accounts using ‘user rights’ and personal information. Earlier, Microsoft Office versions 2013 and 2021 have been found vulnerable to attacks. In some cases even licensed versions of Microsoft 365 were also affected on Windows 10 and 11. Researcher and former Senior Threat Intelligence Analyst at Microsoft, <keyword id="3812614" type="General" weightage="20" keywordseo="kevin-beaumont" source="Orion">Kevin Beaumont</keyword> examine the tweet from nao_sec and <a href="https://doublepulsar.com/follina-a-microsoft-office-code-execution-vulnerability-1a47fce5629e">said</a>, “I’m surprised to see that, infected files are using Microsoft Support Diagnostics Tool to execute the code.” No security update or patch is available for Follina According to Microsoft, currently, no patch is available. Instead, the company’s security response centre team has released a set of <a href="https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/">guidelines</a> to cope with Follina. Company says, the best way to cope with this vulnerability is to disable the Microsoft Support Diagnostics Tool (MSDT) URL protocol. Follow the given steps to disable MSDT- <ul><li>Switch to Administrator and run Command Prompt.</li><li>Execute command ‘reg export HKEY_CLASSES_ROOT\ms-msdt filename’ to back up the registry key.</li></ul>If users are using Microsoft Defender Antivirus, they should turn on automatic sample submission and cloud-delivered protection. It will identify the unknown threats and stop them. SEE ALSO: <a href="https://www.businessinsider.in/tech/apps/news/apples-new-patent-may-use-ultrasonic-haptic-technology-to-make-virtual-reality-more-realistic/articleshow/91955601.cms">Apple’s new patent may use ultrasonic haptic technology to make virtual reality more realistic</a> <a href="https://www.businessinsider.in/tech/news/amazon-employees-storm-a-company-pride-month-celebration-protesting-the-sale-of-transphobic-content/articleshow/91950308.cms">Amazon employees storm a company Pride Month celebration, protesting the sale of transphobic content</a>

Hackers have found a new way to take over your computer using Microsoft Office — here’s what you can do to stay safe

You Searched For "follina" and got 1 results

Hackers have found a new way to take over your computer using Microsoft Office — here’s what you can do to stay safe

Rahul Verma

Popular Keywords

Buying Guides