Cybersecurity firm Rootshell Security has had a busy month, earning recognition for its recent work that led to the identification of three significant vulnerabilities within Microsoft’s suite of applications.
Its RedForce team, known for a persistent commitment to a safer digital world, has been instrumental in uncovering the vulnerabilities, officially known as Microsoft Outlook Spoofing Vulnerability (CVE-2023-33151), Microsoft OneNote Spoofing Vulnerability (CVE-2023-33140), and Microsoft Power Apps Spoofing Vulnerability (CVE-2023-32024). The flaws could have had potentially dire implications for users worldwide if left unnoticed.
These vulnerabilities, characterised by their potential to enable an attacker to spoof a user interface, could have misled users into believing that they were interacting with legitimate data or applications when, in fact, they were not. Microsoft, acknowledging the severity of these vulnerabilities, has been swift in implementing and deploying patches to safeguard its global userbase.
“We’re incredibly proud of our team’s achievement. Our main focus is, and will always be, ensuring a safer digital environment,” stated Shaun Peapell, VP of Global Threat Intelligence for Rootshell Security. “Our recent recognition from Microsoft underscores the valuable role we play in protecting the digital landscape.”
“Recognising these vulnerabilities, addressing them, and working closely with Microsoft to ensure they are patched directly impacts the security and peace of mind of millions of users worldwide,” said Shaun. “This accomplishment is a testament to the expertise and dedication of our team, reinforcing Rootshell Security’s position at the forefront of cybersecurity.”
The company says it continues to extend its collaborative efforts with other industry leaders, constantly striving to uncover potential cybersecurity threats.