News

Russian New Year Exploitation Effects Excel Users

Finjan Software Ltd. (www.finjan.com) will hold a press conference later today to announce a security hole that could effect the vast majority of corporate users of the Internet.

Called the Russian New Year exploitation, the attack takes the HTML and "Call" functions available in Microsoft Excel 95 and 97 and combines them into a strike that can be what Finjan calls "extremely malicious and damaging."

With this combination, an attacker could steal or copy Internet users' files without their knowledge. Most importantly, Excel does not have to be running to execute the exploit; it simply has to be installed on the users' PC.

It's suspected that this process could occur just from visiting a malicious Web site that has the exploit ready to launch once a user visits. The exploit has been named Russian New Year because of its timely announcement and the nation in which it was first discovered. -- Brian Ploskina, Assistant Editor

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Microsoft 365 Commercial Users Getting Identity Theft Monitoring

    U.S. subscribers of Microsoft 365 Personal or Microsoft 365 Family editions are now eligible for a new Identity Theft Monitoring service, the company announced this week.

  • The 2022 Microsoft Product Roadmap

    Microsoft has a lot in the docket for 2022, including new products like SQL Server 2022, Exchange Subscription Edition and Visual Studio 2022 for Mac.

  • Report: IT Budgets To Increase Despite Slowdown in Hiring

    A newly published annual report found that 51 percent of IT departments are planning to increase their IT spending next year, even in the face of a possible recession.

  • Microsoft Bolsters 'Employee Experience' with Latest Viva Apps

    Microsoft's Viva suite is getting new apps and enhancements, according to an announcement made on Thursday.