Ask the average person what an organization needs to consider when choosing a content collaboration platform, and they will spend a second or two deciding if this is some sort of trick question before giving the obvious answers: how well does it work? Is it easy to use? Will it meet the organization’s needs? Ask…
“Progress,” in the computer world, means being able to do more, with fewer resources, more easily. That’s the reason Microsoft announced that it would begin integrating JavaScript capabilities in Excel, upgrading the capabilities of spreadsheet authors to do scripting, which until now required utilizing VBA. According to Microsoft, the upgrade “provides a powerful set of…
In Hollywood, bad PR is better than no PR at all, they say. But in the tech world, bad PR from a competitor just means that they are worried about you. We at Votiro dedicate all our time to solving security problems for our clients – problems that we are proud to say we have…
Word, the widely used word processor by Microsoft Office, is known for its variety of features and capabilities. So many in fact, that some are actually forgotten, having being developed a long time ago. An example of such a feature can be found in DDE, Dynamic Data Exchange, a very old feature who made a…
Windows and its Office progeny may be approaching middle age, but like mischievous teens, they always seem to be up to something new – or, rather, the hackers that have specialized in breaking through PC defenses are always finding new things to exploit. The latest exploit is based on a little-known (until now) file format,…
“Russian hackers” have been much in the news of late, mostly for their alleged political leanings – but a new attack vector attributed to Russian hackers is wreaking havoc in businesses and on private networks around the world. Some 500,000 routers are said to be infected with VPNFilter, a malicious malware that has the capability…
In recent blog posts, we’ve discussed numerous malicious remote-code execution techniques hackers have been discovering – and capitalizing on – in Microsoft Office documents. And we’ve frankly been somewhat shocked that new vulnerabilities are apparently being discovered all the time on a platform that is decades old. But it turns out that Office users are…
Hackers never rest, and in recent weeks they have come up with a brand new scam. CVE-2018-8174, like CVE-2017-0199 which gained huge traction on April 2017, is another riff on inserting malware into malicious RTF Microsoft Office documents. Though another zero-day attack, this one contains an unusual combination of vulnerabilities that has yet to be…
The sandbox, last line of defense for many networks, isn’t what it used to be. Watch Votiro’s researcher, Amit Dori, shows how attackers can bypass sandbox security, inserting malicious code on servers without getting flagged, by taking advantage of basic rules of how VBA (Visual Basic for Applications) macros and sandboxes operate. If once a…