Also malicious web pages. You might need to do slightly more than opening the page, but with all the captcha and similar prompts people are click happy today.
Personally surprised there aren’t more attacks that mimic the click to prove you aren’t a robot and other captcha prompts.
I’m so glad I don’t work in industries like that.
Send me a doc file? In an email? Nah.
Just send me a webpage or PDF I can open in the browser. I’m not opening anything that requires downloading software.
Malicious PDFs are a thing.
Also malicious web pages. You might need to do slightly more than opening the page, but with all the captcha and similar prompts people are click happy today.
Personally surprised there aren’t more attacks that mimic the click to prove you aren’t a robot and other captcha prompts.
U still need to get someone to download or install something. The browser engine is incredibly locked down in terms of messing up ur system.
When opened in a web browser not really. They can’t jump the v8 engine and can’t access remote services without explicit permission due to CORS.
“Here’s the draft, please mark up and return.” And it’s a fucking PDF print of the word or excel doc.
Every damn week.
Wait you’re the guy that actually opens shit on the web version of SharePoint? You fucking monster