https://peertube.eqver.se/videos/watch/b26cf53b-2afc-4efd-91c1-58789a423e14 A DEF CON 32 talk where researchers Michael Gorelik and Arnold Osipov present a series of vulnerabilities in Microsoft Outlook that enable remote code execution. They demonstrate how even an empty email with an invisible form can trigger code execution due to quirks in COM object handling. The talk also explores related vulnerabilities that can leak NTLM credentials, traces the evolution of this attack surface, and provides recommendations for defense. Fri, 24 Jul 2026 11:33:46 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.eqver.se https://peertube.eqver.se/client/assets/images/icons/icon-512x512.png https://peertube.eqver.se/videos/watch/b26cf53b-2afc-4efd-91c1-58789a423e14 All rights reserved, unless otherwise specified in the terms specified at https://peertube.eqver.se/about and potential licenses granted by each content's rightholder.