Monday, May 1, 2017

Iranian Hackers Exploit Recent Office 0-Day in Attacks: Report

Glad to see they are putting the billion plus cash payment the US gave them last year is being put to good use. </sarcasm>

From SecurityWeek:

Iranian Hackers Exploit Recent Office 0-Day in Attacks: Report

"A recently patched vulnerability in Microsoft Office has been abused by Iranian threat actors in attacks against Israeli organizations, researchers from security firm Morphisec reveal.

Carried out between April 19 and April 24, 2017, the politically-motivated, targeted campaign was leveraging the CVE-2017-0199 vulnerability in Office that Microsoft patched earlier this month, after it had been already abused in live attacks. Because many organizations failed to apply the patch, however, the vulnerability continues to offer a viable attack surface."

No comments:

Post a Comment