Another malware scam has popped up that is hiding malicious files inside of seemingly legitimate files. Also, in a callback to the fake job offers that contained malware, which we reported on a while back, this scam is hidden inside infected Microsoft Word docs that are pretending to be legitimate CVs. Here is what you need to look out for.
Microsoft Word is finally stepping out of the dark ages with an update to make interacting with documents even smoother. Microsoft recently revealed that the update they’re working on would let users switch more easily between viewing, editing, and reviewing a document. If this feature sounds familiar, it’s likely because it’s already been part of the Google Docs workspace for a while.
With the productivity suite battle between Microsoft 365 and Google Workspace hotting up, the last thing either of these tech giants will want is news of cybersecurity vulnerabilities affecting their flagship programs. Unfortunately for Microsoft, however, that is exactly what has happened as a new zero-day vulnerability found in Word is giving hackers a way to take control of victims’ computers. Let’s dig in a little deeper.
The web version of Microsoft Word is impressive for the breadth of features it offers users looking for a word processing app to use in a web browser. It is no secret, however, that the web app is short of quite a few features you find on the full app that you download and install on your computer. It now looks like this is about to change for one popular feature at least, which Word for Web is due to receive.
Microsoft has released a warning about a security hole in Microsoft Word 2010, in which a malicious RTF (rich text format) file could grant an attacker user rights in Windows. Users with ‘administrator rights’ are more at risk, as an attacker who gains that ability would have complete access to that Windows system.