PolyWolf on Security

RCE in Office 365

Posted on 2021-08-27: https://srcincite.io/blog/2021/01/12/making-clouds-rain-rce-in-office-365.html

And yes, this is better than “running visual basic in an excel sheet in your browser”, this is actually attacking the underlying infra.