Questions tagged [outlook]

Outlook is the name used by Microsoft for both their email client software (part of the Office suite), and their webmail service (Outlook.com).

Filter by
Sorted by
Tagged with
0
votes
1answer
73 views

Microsoft Outlook Vulnerability CVE-2018-8587 - How likely is exploitation?

I found an interesting blog post A Deep Analysis of the Microsoft Outlook Vulnerability CVE-2018-8587 about Microsoft Outlook heap buffer overflow vulnerability where is described how Microsoft ...
0
votes
0answers
48 views

How to detect a spoofed email with Outlook Web Access?

I am specifically asking about Outlook Web Access (browser based Outlook), and not for any other email service or program. Within Outlook Web Access, is there a way to tell whether or not an email ...
-1
votes
1answer
93 views

Can wifi admin view video downloaded from personal Outlook cloud onto personal laptop?

Can company wifi admin view a video I downloaded to a personal computer from my outside microsoft outlook account accessed through Chrome? I have a personal university Microsoft account https, which I ...
0
votes
0answers
55 views

outlook.com breaks DKIM when forwarding for multipart messages

When I send a multipart email from my server to outlook.com, but have it forwarded to a Gmail account (or anywhere else), DKIM fails, with the message "body hash did not verify", even though as far as ...
3
votes
2answers
115 views

Outlook for Android uses intermediate Microsoft Servers

I have an IMAP + SMTP server running on linux, using Dovecot + Postfix. The server only accepts connections over TLS and uses plaintext authentication once the tunnel is established. I was auditing ...
0
votes
0answers
27 views

When sharing confidential information, which is more secure share via Outlook vs store on Sharepoint then provide access?

I'm trying to figure out what is good practice and what is more secure for my small team. I wanted to set a standard or governance on how to share confidential information within our team. One person ...
2
votes
2answers
53 views

Encrypted email from outlook to other

I have recently setup S/MIME in Outlook for my company's employees to send encrypted and digitally signed emails to one another. Is it possible to send encrypted emails to other email platforms from ...
0
votes
0answers
33 views

Block/spam an email that doesn't match a rule

Is there anything we can put in place such to verify that if the sender's name = "John Doe" and the domain is not company.org (or legitimate verified SPF sender), then the message is marked as spam or ...
-1
votes
1answer
112 views

Can we infect our system by opening a email with outlook 2016?

I read that it is possible to get a virus just by opening a mail (not even clicking at any links on it or opening the attachments), because scripts can be attached to it. Is this also true for ...
1
vote
1answer
553 views

Outlook was redirected to the server clblgn.sceur.ch to get new settings

I (that is, we, our company) has clicked on "Allow" when Outlook has presented us with a redirect to autodiscover-s.outlook.com on our macs to get new settings. Today, we got a popup asking to connect ...
2
votes
0answers
79 views

Search function in Outlook and attachements

I am wondering how the search function of Outlook is working, especially in regards to researching key words that are presents in emails attachements. Does the Outlook search function opens the files ...
0
votes
1answer
58 views

Automatically import/deploy/distribute private key to users for use with S/MIME

it is an Environment with Microsoft Active Directory, Exchange and Windows/Outlook as Client. Now there are the users which have their own private certificates to send signed mails and encrypt ...
1
vote
2answers
168 views

Can my company see the contents on my iPhone if I used my work email on it?

I'm temporarily employed at a company and I needed to send a quick email to one of my coworkers yesterday explaining that I was going to be late for my shift. I couldn't reach them by phone and didn’...
0
votes
4answers
153 views

Proving a forwarded email attachment was not modified

There was an issue and my employer asked me to forward the email that I sent out to a client a few days prior. The email contained 3 PDF attachments and I immediately sent this to my manager. I am ...
1
vote
1answer
38 views

Email security between Outlook and Exchange 365 [duplicate]

From what I've understood by reading message headers and settings in Outlook, mails sent between Outlook on my PC and the Exchange cloud service are encrypted with TLS 1.2. Messages moving within the ...
1
vote
0answers
107 views

How to Force STARTTLS on Outlook and other clients

I am currently writing an essay about securing E-Mails. Now I'm at the point where I want to know if it´s possible to force STARTTLS in connections via SMTP or POP3/IMAP from the clients' side. I know ...
1
vote
1answer
72 views

Outlook service is storing decrypted password in server memory – how insecure is it?

I am evaluating the possibility of using Outlook mobile client with an on-premise Exchange 2013 server. However it seems that the app sends quite a bit of data to Microsoft's cloud servers. It also ...
4
votes
2answers
885 views

Can opening an email be tracked with a wav file?

I work for a large company and they are currently running a phishing training program. I received one of these "safe" phishing emails and found something I don't really understand. There are several ...
1
vote
1answer
128 views

User mail certificates policy: Is expiration+renewal better than no-expiration+revocation?

In our environment, we provide user certificates to sign or encrypt emails. This is an internal setting, meaning the CA is internal to our organization (not a public CA) and handled by our Active ...
5
votes
3answers
1k views

Why does Outlook not block spam sent by employees?

Our organization uses Outlook as email service and hence have our organization email domain. If someone from the organization sends a spam or phishing email to someone else in our organization, its ...
25
votes
4answers
23k views

Microsoft email servers “require remote control of Android device security features”

Just tried to set up my student email address with the default email client on my Android device. The email servers used by the university are outlook.office365.com (incoming) and smtp.office365.com (...
2
votes
3answers
298 views

How to prevent sharing SSH private keys by email

Is it possible to prevent the sharing of SSH private keys over email (Outlook, in particular), both within and outside of the organisation?
1
vote
2answers
2k views

How is my microsoft account compromised?

I have had my Microsoft account ever since Hotmail boomed, and I've had the same super weak six character password up until this year, but it was when one of my google accounts got compromised a few ...
0
votes
0answers
999 views

Using a PowerShell Self-Signed Certificate for Outlook S/MIME

I'm testing out a way that myself and a few others could use S/MIME for our email traffic. I'm using Outlook 2016 with Win10. I have generated my test certificate with the following command in ...
2
votes
2answers
515 views

Is 2-factor authentication for webmail useful when e-mail checking through other methods is without 2fa? [duplicate]

I can check my office webmail through https://webmail.example.com. When my username and password match a 5 digit SMS is sent to my phone that has to be entered on the website as well. This way my ...
1
vote
0answers
139 views

How to view the signing certificate of outlook before sending email using C# addin

using the ribbon xml addin one can send signed email by enabling sign button using schema name as string PR_SECURITY_FLAGS = "http://schemas.microsoft.com/mapi/proptag/0x6E010003"; Here before ...
1
vote
0answers
516 views

Extract Outlook email attachments from memory

Does anyone know if there is a way to extract Outlook emails with attachments from memory? What I have tried is to use volatility to dump PST files from memory and then use libpff to recover the ...
1
vote
2answers
76 views

Can Logout Failure Compromise Email Account? Risk assessment

I get constant reports of failure to sign-out from my Outlook account. I am wondering if this problem can compromise the account or generate a vulnerability (backdoor-path)? Inability to log out ...
0
votes
1answer
655 views

Why doesn't Outlook handle phishing URLs [closed]

There are two MAJOR problems at my company (as in several others also I presume). Users clicking on links in phishing emails. Users opening (and running) malware-infected attachments. Yes, I should ...
1
vote
2answers
52 views

What are the security risks of using downloadable email vs. remote/online email?

The organization at which I work wants us to download our e-mails rather than use a remote/online service like gmail. I have argued that this is less secure because downloading the e-mails brings the ...
0
votes
1answer
225 views

Alarming Rate of “Sign-Out Errors” in Outlook Account

After I logout from my Outlook account, I get high frequency of "signing out error" reports, with the following message: Hmm... we're having trouble signing you out. You may still be signed in to ...
1
vote
1answer
448 views

Does this strange string of letters indicate that my Outlook account has been hacked?

After I sign in to my Outlook account, I am seeing a strange string of letters and numbers below my profile ID, for example (see also attached screenshot): My account name: Default-54914b26-XXXX-...
1
vote
1answer
869 views

Does putting in quarentine attachments with two dots increase security in Outlook 2010?

Outlook 2010 and antispam systems already forbid executable attachments. In this scenario, does putting attachments with two dots in quarentine increase security? Attackers used to use this technique ...