ISSUE 23.19 • 2026-05-11 MICROSOFT 365 By Peter Deegan Outlook email rules are undergoing a major — and mostly unheralded — change. They’re going online. If the mailbox is stored online in a Microsoft-hosted service such as Outlook.com or Microsoft 365, then Outlook rules will run only in the cloud, not locally on your PC. […]

 Carrie Roberts // My current favorite exploit is creating malicious outlook rules as described here. The rule is configured to download an executable file with an EXE extension (.exe) when an […]

The post Malicious Outlook Rule without an EXE appeared first on Black Hills Information Security, Inc..