Davey is a four-decade veteran technology journalist and contributing editor at PC Pro magazine, a position he has held since the first issue was published in 1994. You can follow Davey on Mastodon, Twitter/X and most social networks as happygeek. Davey has spent more than 30 years as a freelance technology journalist.
A security researcher has issued a warning to all 400 million users of Microsoft Outlook after discovering an email bug that could allow anyone to impersonate official Microsoft accounts.
Vsevolod Kokorin, a security researcher at SolidLab, posted a message on X, formerly known as Twitter, expressing frustration with Microsoft after he had uncovered and responsibly disclosed a serious vulnerability impacting Outlook email, only to be told it couldn’t be reproduced. The bug, which Kokorin rightly refuses to provide the technical details needed to exploit it at this time, enables anyone sending an email to another Outlook user to impersonate official Microsoft corporate accounts. As shown in the example posted to X, this means an email can appear to come from Microsoft’s security team, with all the implications for phishing, malware distribution and cybercrime that brings with it.
While the vulnerability only appears to be exploitable when sending email from one Outlook user to another, given that there are around 400 million users it creates a huge threat surface.I have contacted Microsoft for a statement and will update this article in due course. Meanwhile, however, if you are an Outlook email user then it’s highly recommended that you stay alert to any requests you might receive that appear to be from Microsoft.
In an update to his original posting, Kokorin said of Microsoft that “at this point, they have acknowledged the issue,” which could mean a patch will be forthcoming if the vulnerability is found to be fixable. I sincerely hope it is, as Kokorin also said that the emails being spoofed passed theOur community is about connecting people through open and thoughtful conversations. We want our readers to share their views and exchange ideas and facts in a safe space.
Outlook Security Outlook Email Security Warning Email Outlook Email Vulnerability Spoofing Outlook Email Microsoft Outlook Security Threat
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Arlo’s new security tag can disarm your security system with a tapThe Arlo Security Tag works with the company’s smart security system and video doorbell in a neat smart home symbiosis.
Read more »
Arlo’s new Security Tag lets you arm/disarm your security system with just a tapThe Arlo Security Tag lets you arm or disarm your security system by simply tapping your video doorbell or keypad hub.
Read more »
NYC Transit getting new interim boss after Richard Davey named chair of Massachusetts Port Authority |NYC Transit President Richard Davey, chief of subways and buses, was named the new chief executive officer of the Massachusetts Port Authority (Massport) by
Read more »
Security high at Cricket World Cup in New York amid new ISIS-K threat, official saysThere is increased security around Sunday's highly anticipated game between India and Pakistan at the Cricket World Cup in Nassau County amid a new ISIS-K threat.
Read more »
Republican Issues Social Security WarningAlabama Republican Senator Tommy Tuberville suggested that retirees might not receive their benefits.
Read more »
Elon Musk Issues Crucial Security Warning, Crypto Community in DoubtTech billionaire who owns X has made an important warning, setting the crypto community abuzz
Read more »