Questions tagged [outlook]

Outlook is the name used by Microsoft for both their email client software (part of the Office suite), and their webmail service (Outlook.com).

Filter by
Sorted by
Tagged with
0
votes
0answers
28 views

How unsafe is EnableUnsafeClientMailRules?

To implement some automatic rules that run scripts in Outlook, you now (following the KB3191883 update in 2017) have to set the EnableUnsafeClientMailRules in the registry. A lot of online tutorials ...
0
votes
1answer
64 views

Email attachments malicious? [duplicate]

So I recently encountered a phishing email, I didn't follow the link of course, but I noticed it had a attachment file of 1KB I didn't download it, but was wondering whether it was possible to be ...
1
vote
0answers
14 views

Granting access to mailbox/calendar to another with MFA enabled?

Jane needs access to John's Outlook mailbox and calendar. When Jane attempts to access it (she has his UN & PW) John receives the MFA challenge preventing Jane from accessing it. This works ...
1
vote
1answer
75 views

Can a forwarding rule be set on Outlook that will not be visible on office365/exchange admin interface?

In an incident concerning a user's mailbox - will any rule that forwards emails to a potential attack be visible in the office365/exchange admin interface, or is it possible to set an outlook client-...
3
votes
2answers
1k views

Outlook rule to forward all emails - is that a common scam?

Recently we had a security problem. One email account which is based on MS Exchange 365 was hacked and the hacker forwarded all emails per rule to a Gmail account. I checked all relevant PCs and I ...
0
votes
1answer
250 views

Microsoft Outlook Vulnerability CVE-2018-8587 - How likely is exploitation?

I found an interesting blog post A Deep Analysis of the Microsoft Outlook Vulnerability CVE-2018-8587 about Microsoft Outlook heap buffer overflow vulnerability where is described how Microsoft ...
0
votes
0answers
56 views

How to detect a spoofed email with Outlook Web Access?

I am specifically asking about Outlook Web Access (browser based Outlook), and not for any other email service or program. Within Outlook Web Access, is there a way to tell whether or not an email ...
-1
votes
1answer
131 views

Can wifi admin view video downloaded from personal Outlook cloud onto personal laptop?

Can company wifi admin view a video I downloaded to a personal computer from my outside microsoft outlook account accessed through Chrome? I have a personal university Microsoft account https, which I ...
5
votes
2answers
561 views

Outlook for Android uses intermediate Microsoft Servers

I have an IMAP + SMTP server running on linux, using Dovecot + Postfix. The server only accepts connections over TLS and uses plaintext authentication once the tunnel is established. I was auditing ...
0
votes
0answers
43 views

When sharing confidential information, which is more secure share via Outlook vs store on Sharepoint then provide access?

I'm trying to figure out what is good practice and what is more secure for my small team. I wanted to set a standard or governance on how to share confidential information within our team. One person ...
3
votes
2answers
89 views

Encrypted email from outlook to other

I have recently setup S/MIME in Outlook for my company's employees to send encrypted and digitally signed emails to one another. Is it possible to send encrypted emails to other email platforms from ...
-1
votes
1answer
117 views

Can we infect our system by opening a email with outlook 2016?

I read that it is possible to get a virus just by opening a mail (not even clicking at any links on it or opening the attachments), because scripts can be attached to it. Is this also true for ...
2
votes
1answer
1k views

Outlook was redirected to the server clblgn.sceur.ch to get new settings

I (that is, we, our company) has clicked on "Allow" when Outlook has presented us with a redirect to autodiscover-s.outlook.com on our macs to get new settings. Today, we got a popup asking to connect ...
3
votes
0answers
84 views

Search function in Outlook and attachements

I am wondering how the search function of Outlook is working, especially in regards to researching key words that are presents in emails attachements. Does the Outlook search function opens the files ...
1
vote
1answer
161 views

Automatically import/deploy/distribute private key to users for use with S/MIME

it is an Environment with Microsoft Active Directory, Exchange and Windows/Outlook as Client. Now there are the users which have their own private certificates to send signed mails and encrypt ...
1
vote
2answers
620 views

Can my company see the contents on my iPhone if I used my work email on it?

I'm temporarily employed at a company and I needed to send a quick email to one of my coworkers yesterday explaining that I was going to be late for my shift. I couldn't reach them by phone and didn’...
0
votes
4answers
654 views

Proving a forwarded email attachment was not modified

There was an issue and my employer asked me to forward the email that I sent out to a client a few days prior. The email contained 3 PDF attachments and I immediately sent this to my manager. I am ...
1
vote
1answer
43 views

Email security between Outlook and Exchange 365 [duplicate]

From what I've understood by reading message headers and settings in Outlook, mails sent between Outlook on my PC and the Exchange cloud service are encrypted with TLS 1.2. Messages moving within the ...
1
vote
0answers
198 views

How to Force STARTTLS on Outlook and other clients

I am currently writing an essay about securing E-Mails. Now I'm at the point where I want to know if it´s possible to force STARTTLS in connections via SMTP or POP3/IMAP from the clients' side. I know ...
1
vote
1answer
77 views

Outlook service is storing decrypted password in server memory – how insecure is it?

I am evaluating the possibility of using Outlook mobile client with an on-premise Exchange 2013 server. However it seems that the app sends quite a bit of data to Microsoft's cloud servers. It also ...
4
votes
2answers
1k views

Can opening an email be tracked with a wav file?

I work for a large company and they are currently running a phishing training program. I received one of these "safe" phishing emails and found something I don't really understand. There are several ...
1
vote
1answer
154 views

User mail certificates policy: Is expiration+renewal better than no-expiration+revocation?

In our environment, we provide user certificates to sign or encrypt emails. This is an internal setting, meaning the CA is internal to our organization (not a public CA) and handled by our Active ...
5
votes
3answers
1k views

Why does Outlook not block spam sent by employees?

Our organization uses Outlook as email service and hence have our organization email domain. If someone from the organization sends a spam or phishing email to someone else in our organization, its ...
38
votes
4answers
43k views

Microsoft email servers “require remote control of Android device security features”

Just tried to set up my student email address with the default email client on my Android device. The email servers used by the university are outlook.office365.com (incoming) and smtp.office365.com (...
2
votes
3answers
364 views

How to prevent sharing SSH private keys by email

Is it possible to prevent the sharing of SSH private keys over email (Outlook, in particular), both within and outside of the organisation?
1
vote
2answers
3k views

How is my microsoft account compromised?

I have had my Microsoft account ever since Hotmail boomed, and I've had the same super weak six character password up until this year, but it was when one of my google accounts got compromised a few ...
0
votes
0answers
2k views

Using a PowerShell Self-Signed Certificate for Outlook S/MIME

I'm testing out a way that myself and a few others could use S/MIME for our email traffic. I'm using Outlook 2016 with Win10. I have generated my test certificate with the following command in ...
2
votes
2answers
647 views

Is 2-factor authentication for webmail useful when e-mail checking through other methods is without 2fa? [duplicate]

I can check my office webmail through https://webmail.example.com. When my username and password match a 5 digit SMS is sent to my phone that has to be entered on the website as well. This way my ...
1
vote
0answers
146 views

How to view the signing certificate of outlook before sending email using C# addin

using the ribbon xml addin one can send signed email by enabling sign button using schema name as string PR_SECURITY_FLAGS = "http://schemas.microsoft.com/mapi/proptag/0x6E010003"; Here before ...
2
votes
0answers
667 views

Extract Outlook email attachments from memory

Does anyone know if there is a way to extract Outlook emails with attachments from memory? What I have tried is to use volatility to dump PST files from memory and then use libpff to recover the ...
1
vote
2answers
79 views

Can Logout Failure Compromise Email Account? Risk assessment

I get constant reports of failure to sign-out from my Outlook account. I am wondering if this problem can compromise the account or generate a vulnerability (backdoor-path)? Inability to log out ...
0
votes
1answer
731 views

Why doesn't Outlook handle phishing URLs [closed]

There are two MAJOR problems at my company (as in several others also I presume). Users clicking on links in phishing emails. Users opening (and running) malware-infected attachments. Yes, I should ...
2
votes
2answers
58 views

What are the security risks of using downloadable email vs. remote/online email?

The organization at which I work wants us to download our e-mails rather than use a remote/online service like gmail. I have argued that this is less secure because downloading the e-mails brings the ...
0
votes
1answer
267 views

Alarming Rate of “Sign-Out Errors” in Outlook Account

After I logout from my Outlook account, I get high frequency of "signing out error" reports, with the following message: Hmm... we're having trouble signing you out. You may still be signed in to ...
1
vote
1answer
510 views

Does this strange string of letters indicate that my Outlook account has been hacked?

After I sign in to my Outlook account, I am seeing a strange string of letters and numbers below my profile ID, for example (see also attached screenshot): My account name: Default-54914b26-XXXX-...
1
vote
1answer
888 views

Does putting in quarentine attachments with two dots increase security in Outlook 2010?

Outlook 2010 and antispam systems already forbid executable attachments. In this scenario, does putting attachments with two dots in quarentine increase security? Attackers used to use this technique ...