June 14, 2023

Patch Tuesday fixes 4 critical RCE bugs, and a bunch of Office holes

No zero-days this month, if you ignore the Edge RCE hole patched last week

Naked Security

April 11, 2023

April showers Windows updates on sysadmins

A 97-CVE Patch Tuesday marks another big haul for the OS

Threat Research

October 20, 2022

S3 Ep105: WONTFIX! The MS Office cryptofail that “isn’t a security flaw” [Audio + Text]

The coolest video game ever! And lots of solid cybersecurity advice - listen now!

Naked Security

October 14, 2022

Serious Security: Microsoft Office 365 attacked over feeble encryption

How 2022 is your encryption?

Naked Security

July 23, 2022

Office macro security: on-again-off-again feature now BACK ON AGAIN!

20 years to turn it on, then 20 weeks to turn it off, then just 2 weeks to turn it back on again. That's progress!

Naked Security

July 11, 2022

That didn’t last! Microsoft turns off the Office security it just turned on

An Office anti-malware setting that took more than 20 years to arrive... and fewer than 20 weeks to vanish again.

Naked Security

May 31, 2022

Mysterious “Follina” zero-day hole in Office – here’s what to do!

News has emerged of a "feature" in Office that has been abused as a zero-day bug to run evil code. Turning off macros doesn't help!

Naked Security

February 08, 2022

At last! Office macros from the internet to be blocked by default

It's been a long time coming, and we're not there yet, but at least Microsoft Office will be a bit safer against macro malware...

Naked Security

September 14, 2021

Big Office bug squashed for September 2021’s Patch Tuesday

Install this month's update to get some relief from the CVE-2021-40444 Office vulnerability

Threat Research