Microsoft Office

September 7th, Microsoft released a security advisory for a remote code execution vulnerability (CVE-2021-40444) in Microsoft MSHTML, the rendering engine that Office apps use in Windows to display web content. Microsoft says that it is investigating reports of targeted attacks that try to exploit the MSHTML flaw using specially designed Microsoft Office files. The announcement… Read More

Microsoft has released a relatively small number of fixes this month, in total just 56. But they include patches for a zero-day flaw in the Win32k component and some serious TCP/IP networking stack vulnerabilities. Windows and Windows Server February's cumulative update (CU) for Windows 10 comes with a patch for a zero-day Elevation of Privilege… Read More

Microsoft fixes a zero-day in its Defender antimalware software and issues a patch for a vulnerability that was publicly disclosed in December.

Microsoft rereleases Windows Server 2019 and Windows 10 version 1809, and patches 62 flaws, 13 of which are rated critical.

In this month’s Patch Tuesday, Microsoft released a disabled-by-default patch for Spectre 4, Adobe plugs a zero-day Flash vulnerability that can be exploited via Excel, and there are fixes for DNS, black screens, and Cortana.

In this Ask the Admin, Russell Smith looks at how you can secure Office 2016 macros and VBA code to prevent attacks.

A recent leak reinforces an emerging view of Microsoft as being on the cusp of a new era of productivity. That is, while Microsoft is working to move its most successful traditional software products to popular mobile platforms and to the cloud, it is also working behind the scenes to effectively undercut those offerings with… Read More

Still on the fence about Office 365? Read our top reasons why we think Microsoft's updated cloud-based office productivity suite is here to stay.