Skip to Primary Navigation

Warning issued on Office 365 mail vulnerability, but Microsoft denies problem

Office 365 packaging
Photo: Getty Images

Use of ECB encryption shown to leave mail vulnerable in security firm’s tests.

Cybersecurity company WithSecure has published details of a vulnerability in Microsoft Office 365 Message encryption (OME), but Microsoft is so far refusing to acknowledge there is a risk that needs addressing.

WithSecure says the problem comes from Microsoft’s decision to use a block cypher confidentiality mode called Electronic Codebook (ECB). A

Subscribe for free to continue reading

Read more articles like this one with our free plan, or get our Premium plan for access to all content – including our 5,000+ article archive, exclusive interviews, podcasts, and more.

Already have an account? Sign in