Decryption Digest

CVE Analysis & Threat Intelligence Briefings

In-depth analyses of zero-day vulnerabilities, CVE exploits, ransomware campaigns, and nation-state attack techniques affecting enterprise security. Filter by category, tag, or keyword.

Free daily briefing

Every article here lands in subscribers' inboxes the morning it drops.

Threat intel, active CVEs, and campaign alerts, distilled daily for practitioners. 50,000+ subscribers. No noise.

Free. No spam. Unsubscribe anytime.

Category:

2 results tagged zero-click

CVE-2023-23397 Explained: The Outlook Zero-Click NTLM Hash Theft Vulnerability

CVE REFERENCEMarch 14, 20239 min

CVE-2023-23397 Outlook: Zero-Click NTLM Hash Theft

CVE-2023-23397 is a critical privilege escalation and credential theft vulnerability in Microsoft Outlook for Windows. A specially crafted calendar invitation with a UNC path in the reminder sound field causes Outlook to automatically connect to an attacker-controlled SMB server, leaking the victim's NTLM authentication hash. No user interaction is required, the exploit fires when the reminder triggers, even if the meeting invitation is never opened.

Eric Bang

Founder & Cybersecurity Evangelist

Read

CVE-2022-30190 Explained: Follina, the Zero-Click Microsoft Office RCE

CVE REFERENCEJune 14, 20228 min

CVE-2022-30190 Follina: Zero-Click Office RCE via MSDT

CVE-2022-30190 (Follina) is a critical RCE vulnerability in the Microsoft Support Diagnostic Tool (MSDT) triggered via the ms-msdt:// URI scheme from within a malicious Office document. Attackers achieve code execution with no macro prompts, and in some configurations previewing the file in Windows Explorer alone triggers the exploit.