News

Russian New Year Exploitation Effects Excel Users

Finjan Software Ltd. (www.finjan.com) will hold a press conference later today to announce a security hole that could effect the vast majority of corporate users of the Internet.

Called the Russian New Year exploitation, the attack takes the HTML and "Call" functions available in Microsoft Excel 95 and 97 and combines them into a strike that can be what Finjan calls "extremely malicious and damaging."

With this combination, an attacker could steal or copy Internet users' files without their knowledge. Most importantly, Excel does not have to be running to execute the exploit; it simply has to be installed on the users' PC.

It's suspected that this process could occur just from visiting a malicious Web site that has the exploit ready to launch once a user visits. The exploit has been named Russian New Year because of its timely announcement and the nation in which it was first discovered. -- Brian Ploskina, Assistant Editor

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • How To Replace an Aging Domain Controller

    If the hardware behind your domain controllers has become outdated, here's a step-by-step guide to performing a hardware refresh.

  • Azure Backup for SQL Server 2008 Available at Preview Stage

    Microsoft added the option of using the Azure Backup service to provide recovery support for SQL Server 2008 and SQL Server 2008 R2 when those workloads are hosted on Azure virtual machines.

  • Microsoft Suggests Disabling Old Protocols with Exchange Server 2019

    Exchange Server 2019 with Cumulative Update 2 (CU2) can help organizations rid themselves of old authentication protocols, which constitute a potential security risk.

  • Microsoft Previews New Edge Browser on Windows 7 and Windows 8.1

    Microsoft announced this week that it has released previews of its Chromium-based Microsoft Edge Web browsers for use on Windows 7, Windows 8 and Windows 8.1 systems.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.