Outlook zero-click NTLM hash leak used by Russian state hackers (CVE-2023-23397) ยท updates https://pwn.watch/i/microsoft-outlook-ntlm-leak-cve-2023-23397 A crafted Outlook reminder with a UNC path made Outlook for Windows send the user's NTLM hash to an attacker's server without any click. Microsoft said a Russia-based actor (APT28) used it against European government, transport, energy and military targets. en Fri, 24 Mar 2023 00:00:00 GMT Outlook zero-click NTLM hash leak used by Russian state hackers (CVE-2023-23397): Microsoft publishes investigation guidance for CVE-2023-23397 https://pwn.watch/i/microsoft-outlook-ntlm-leak-cve-2023-23397 https://pwn.watch/i/microsoft-outlook-ntlm-leak-cve-2023-23397#2023-03-24-717869d4 Fri, 24 Mar 2023 00:00:00 GMT critical <p><a href="https://www.microsoft.com/en-us/security/blog/2023/03/24/guidance-for-investigating-attacks-using-cve-2023-23397/">Source</a></p> Outlook zero-click NTLM hash leak used by Russian state hackers (CVE-2023-23397): Patch Tuesday fix; CISA adds CVE-2023-23397 to KEV https://pwn.watch/i/microsoft-outlook-ntlm-leak-cve-2023-23397 https://pwn.watch/i/microsoft-outlook-ntlm-leak-cve-2023-23397#2023-03-14-b828faff Tue, 14 Mar 2023 00:00:00 GMT critical <p><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397">Source</a></p>