Microsoft Office Vulnerability Most Common Hacker Target

Malicious attachment launches provides the ability to deploy further malware

By By Dan Hounsell


As healthcare systems continue strengthening IT security against cyber attacks and the federal government issues guidance to support their efforts, information is emerging about the most common targets of hackers looking for valuable patient data and other information.

The most frequent exploit in the last three months caught by HP Sure Click was against an older, unpatched memory corruption vulnerability in Microsoft Office, accounting for nearly 75 percent of all exploits in the fourth quarter of 2020, according to a recent threat insights report from HP Bromium as reported by Health IT Security.

CVE-2017-11882, found in Equation Editor, is a memory-corruption vulnerability that can allow an attacker to execute remote code on vulnerable devices after the victim opens a malicious document typically sent in a phishing email. The malicious attachment launches the exploit and provides the ability to deploy further malware. Microsoft has provided a software update to eliminate the risk, but these unpatched systems are leaving the door open to attacks.



March 19, 2021


Topic Area: Information Technology


Recent Posts

Probiotic Cleaners: The Start of a Cleaning Revolution?

Advantages of probiotic cleaning include fewer resistant genes and cost savings through decreased antibiotic use.


Gun Incident Highlights Need for Security Infrastructure

A man was arrested at Aultman Memorial Hospital after allegedly firing a gun in the ER.


Creative Solutions in Healthcare Acquires 5 Skilled Nursing Facilities

Each location is planned to begin substantial upgrades to infrastructure and resident services.


Over 700 Hospitals at Risk of Closure

Hospitals are citing financial problems at the main cause of potential closure.


Astrana Health Fully Acquires Prospect Health

They completed the acquisition of Prospect Health for a total purchase price of $708 million.


 
 


FREE Newsletter Signup Form

News & Updates | Webcast Alerts
Building Technologies | & More!

 
 
 


All fields are required. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.