Why Your Business Should Use a Password Manager
To the average person, it’s too easy to forget a password and leave themselves vulnerable to account lockout, which can end up being a real hassle....
1 min read
Heroic Technologies : Jul 23, 2025 10:06:41 PM
You may not know the name Matthew Hickey, but you should thank him for a recent discovery that could save you a lot of grief.
Hickey is the co-founder of a company called Hacker House. He recently discovered a flaw that could allow for the opening of a remote search window simply by opening a Word or RTF document.
This newly discovered zero-day vulnerability is about as serious as it gets.
Here’s how it works:
A specially crafted Word Document or RTF is created which, when launched, will automatically launch a “search-MS” command, which opens a Windows Search window.
This window lists executable files on a remote share and the share can be given any name the attacker desires such as “Critical Updates” and the like. That would naturally prompt an unsuspecting user to click the file name to run that file.
Naturally, clicking the file name wouldn’t do anything other than install malware, which is exactly what the hackers are trying to do.
Although not quite as dangerous as the MS-MSDT remote code execution security flaw, this one is still incredibly serious. Even worse, there is not currently a patch that will make your system safer.
The good news however, is that there are steps you can take to minimize your risks.
Kudos to the sharp eyes of Matthew Hickey for first spotting this flaw. We can only hope when the next zero-day rears its head, researchers like Mr. Hickey will be there to help point them out and show us how to defeat them.
To the average person, it’s too easy to forget a password and leave themselves vulnerable to account lockout, which can end up being a real hassle....
Are you an AirPods Pro owner? Do yours crackle and hiss? If you answered yes to both of those questions be aware that Apple has recently extended the...
Managed IT is crucial for law firms trying to deal with the complexities of managing technology. These services include a variety of solutions aimed...
Microsoft recently announced that it was doing a bit of re-branding.
Do you own and operate a WordPress website? Do you also use the “All in One” SEO plugin?
The MalwareHunterTeam recently discovered a new ransomware operation that is particularly nasty. Called Onyx, outwardly, the operation does what most...