Our initial research of the exploit indicates that this vulnerability is capable of affecting Microsoft Office versions 2003, 2007, and 2010 (Office 2010 vulnerability is limited to Windows XP and Server 2003 operating systems) and that it will fail on machines viewing the documents in protected mode (ActiveX support in documents disabled). While it is not easy to determine if computers have ActiveX enabled for Office documents, it is possible to profile vulnerable combinations of Microsoft Windows and Office to help understand the attack surface.
Our telemetry feeds indicate the following breakdown of Microsoft Office versions deployed in enterprise environments:
- Office 2003 - 5%
- Office 2007 - 30%
- Office 2010 - 41%
- Office 2013 - 14%
Beyond practicing due diligence in opening any attachments arriving by email, it is recommended that all users of the affected Office versions install Microsoft Fix it 51004. Websense will continue to monitor any developments related to the use of this vulnerability in future attacks.
===> Beyond practicing due diligence in opening any attachments arriving by email, it is recommended that all users of the affected Office versions install Microsoft Fix it 51004. <===
Websense will continue to monitor any developments related to the use of this vulnerability in future attacks. -
Your new post is loading...
Early Friday morning the world experienced the year’s latest cyberattack. Starting first in the United Kingdom and Spain, the malicious “WannaCrypt” software quickly spread globally, blocking customers from their data unless they paid a ransom using Bitcoin. The WannaCrypt exploits used in the attack were drawn from the exploits stolen from the National Security Agency, or NSA, in the United States. That theft was publicly reported earlier this year.
Learn more / en savoir plus / Mehr erfahren:
https://gustmees.wordpress.com/?s=cybersecurity
https://gustmees.wordpress.com/?s=5+minutes