Today, we released Security Advisory 3010060to provide additional protections regarding limited, targeted attacks directed at Microsoft Windows customers. A cyberattacker could cause remote code execution if someone is tricked into opening a maliciously-crafted PowerPoint document that contains an infected Object Linking and Embedding (OLE) file.
As part of this Security Advisory, we have included an easy, one-click Fix itsolution to address the known cyberattack. Please review the “Suggested Actions” section of the Security Advisory for additional guidance. Applying the Fix it does not require a reboot. We suggest customers apply this Fix it to help protect their systems.
The Enhanced Mitigation Experience Toolkit(EMET) also helps to defend against this cyberattack when configured to work with Microsoft Office software. The necessary configuration steps for EMET, are provided in the “Suggested Actions” section of the Security Advisory.
We also encourage you to follow the “Protect Your Computer” guidance by enabling a firewall, applying all software updates and installing anti-virus and anti-spyware software. In addition, we recommend that individuals avoid clicking suspicious links, or opening email messages from unfamiliar senders. More information can be found at www.microsoft.com/protect.
We continue to work on a security update to address this cyberattack. We’re monitoring the threat landscape very closely and will continue to take appropriate action to help protect our global customers.
Tracey Pretorius
Director, Response Communications