Microsoft: New critical Outlook RCE bug exploited as zero-day

February 14, 2024 at 03:12PM Microsoft updated a security advisory warning about a critical Outlook bug, tracked as CVE-2024-21413, leading to remote code execution if exploited. The vulnerability allows bypassing Protected View, affecting multiple Office products including Microsoft Outlook 2016 and Office 2019. Check Point researchers discovered the vulnerability called Moniker Link, recommending applying the … Read more

Microsoft deprecates Defender Application Guard for Office

November 27, 2023 at 04:02PM Microsoft is deprecating Defender Application Guard for Office and Windows Security Isolation APIs. They recommend using Defender for Endpoint attack surface reduction rules, Protected View, and Windows Defender Application Control as alternatives. Application Guard for Office is a security feature that restricts files downloaded from untrusted sources, protecting against malware … Read more