So you think you can block Macros?

A great blog post from Outflank, and a must-read for CISOs and technical blue teams! The post outlines common controls and strategies deployed to mitigate Microsoft Office macro security issues. They also introduce LOLdocs from a recent Brucon talk, detailing how vulnerabilities in signed #microsoft Office content might be abused to bypass even strictly configured MS Office installs. Awesome.

block blog blog post blue bypass cisos controls for cisos great macro macros microsoft microsoft office microsoft office macro security ms office netsec office security security issues teams technical vulnerabilities