Webinar: Deep Dive into Outlook RCE Exploits – Insights from SecTor 2025

What you'll learn

• Discover The Anatomy of Outlook Exploits: A deep dive into the vulnerabilities exposed in CVE-2025-21357 and CVE-2025-47176 , including improper pathname sanitization and roaming signature exploitation. - Learn About Roaming Signatures Vulnerabilities: Explore how attackers leverage Outlook’s cloud-based roaming signatures for persistence and backdooring , and why improper sanitization remains a major security gap. - Watch a Live Demonstration: Watch as Michael Gorelik demonstrates the exploitation lifecycle from attacker to victim, showcasing real-world attack scenarios and their impact. - Hear Research Directions and Recommendations: Learn about new attack surfaces discovered during SecTor research, including unsanitized APIs, non-standard file types, and -based information disclosure risks. - Gain Actionable Defense Strategies: Gain practical recommendations to secure your organization, including patching, monitoring sync anomalies, and implementing defense-in-depth measures like MFA and least privilege.

Topics covered