US Cyber Command has issued a warning about an unnamed foreign country’s attempt to spread malware through the exploitation of a vulnerability in Microsoft Outlook. The alert refers to CVE-2017-11774, a vulnerability that if exploited could allow an attacker to bypass security features and execute arbitrary commands on Windows computers. Microsoft issued a patch for the vulnerability in October 2017, but the security hole has since continued to be used by the Iranian-backed APT33 (also known as Elfin) hacking group. The latest alert comes after the Department of Homeland Securitys Cybersecurity and Infrastructure Security Agency (CISA) specifically warned of increased activity by Iranian hacking groups.”]

