Microsoft Warns of Stealthy Outlook Vulnerability Exploited by Russian Hackers

Microsoft on Friday shared guidance to help customers discover indicators of compromise (IoCs) associated with a recently patched Outlook vulnerability.
Tracked as CVE-2023-23397 (CVSS score: 9.8), the critical flaw relates to a case of privilege escalation that could be exploited to steal NT Lan Manager (NTLM) hashes and stage a relay attack without requiring any user interaction.
"External

attack case compromise critical critical flaw customers cve cve-2023-23397 cvss discover escalation exploited external flaw guidance hackers hashes indicators of compromise iocs lan manager microsoft ntlm outlook privilege privilege escalation relay relay attack russian russian hackers score stage steal vulnerability vulnerability exploited