tripwire Microsoft warns of a Windows zero-day security hole that is being actively exploited

[ENTERPRISE]

  Quote

    

In a security advisory, Microsoft has warned that malicious hackers are exploiting an unpatched vulnerability in Windows to launch targeted attacks against organisations.

 

The security hole, dubbed CVE-2021-40444, is a previously unknown remote code execution vulnerability in MSHTML, a core component of Windows which helps render web-based content.

 

According to Microsoft, attacks exploiting the vulnerability have targeted companies via boobytrapped Microsoft Office documents.

Expand  

Source

[GanjaSMK]

*email dings*

 

| Hey everyone, shhhh, look what I found in the boss' files! |

 

*everyone opens the doc*

 

10 minutes later...

 

* IT Department*

 

"* PEOPLE?! How did we let our whole network come under attack?"

 

*The boss*

 

"I opened it too..."

 

 

[PCSarge]

  On 10/09/2021 at 16:38, GanjaSMK said:

*email dings*

 

| Hey everyone, shhhh, look what I found in the boss' files! |

 

*everyone opens the doc*

 

10 minutes later...

 

* IT Department*

 

"* PEOPLE?! How did we let our whole network come under attack?"

 

*The boss*

 

"I opened it too..."

 

 

Expand  

more like *ding*

 

what is this i won something? *opens doc*

 

*20 minutes later entire network is fubar*

[schuck6566]

  On 11/09/2021 at 08:56, PCSarge said:

more like *ding*

 

what is this i won something? *opens doc*

 

*20 minutes later entire network is fubar*

Expand  

Or *ding* from head of IT

 Regarding files downloaded on office servers.pls identify if you recognize.... See attachments.