InfoSecBulletin Cybersecurity for mankind
Microsoft is looking into a problem with Outlook security alerts when trying to open .ICS calendar files after installing December 2023 Patch Tuesday Office security updates.
Rented bank account used to illegal transection: 5 arrested
Successfully held “InfoSecCon-2024″at Dhaka Bangladesh
Bangladeshi hacker hack for girlfriend’s expenses; finally caught
Bangladeshi Social media flooded with unauthorized withdrawals from bank accounts
Unprotected UN Database Exposes 228GB of Gender Violence Victims’ Data
Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability
Hackers Earn $500,000 on First Day of Pwn2Own Ireland 2024
Fortinet + Crowdstrike team on protection from endpoint to firewall
Sophos to Acquire Secureworks in $859M
2nd time hacker breached Internet Archive
Microsoft 365 users report a problem that they receive warning messages when they try to open locally saved ICS files. The messages indicate a possible security risk.
“This behavior is not expected when opening .ICS files. This is a bug and will be addressed in a future update,” Microsoft explains in this support document.
The company announced that a security warning will appear after installing an update that fixes the CVE-2023-35636 Microsoft Outlook information disclosure vulnerability.
If not fixed, the security flaw can be used by attackers to trick users of unpatched Outlook into opening files to steal Windows credentials.
Attackers can later use the compromised user’s authentication to gain access to sensitive data or spread throughout the network.
