IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [outlook]

Outlook is the name used by Microsoft for both their email client software (part of the Office suite), and their webmail service (Outlook.com).

42 questions
39
votes
4 answers

Microsoft email servers "require remote control of Android device security features"

Just tried to set up my student email address with the default email client on my Android device. The email servers used by the university are outlook.office365.com (incoming) and smtp.office365.com (outgoing). So I set it up like I always do with a…
voices
  • 1,649
  • 7
  • 22
  • 36
7
votes
2 answers

Outlook for Android uses intermediate Microsoft Servers

I have an IMAP + SMTP server running on linux, using Dovecot + Postfix. The server only accepts connections over TLS and uses plaintext authentication once the tunnel is established. I was auditing the mail logs today and was concerned by unknown…
user97661
6
votes
3 answers

Why does Outlook not block spam sent by employees?

Our organization uses Outlook as email service and hence have our organization email domain. If someone from the organization sends a spam or phishing email to someone else in our organization, its received by the recipient. I tried sending a simple…
user5155835
  • 351
  • 2
  • 3
  • 10
5
votes
3 answers

Outlook rule to forward all emails - is that a common scam?

Recently we had a security problem. One email account which is based on MS Exchange 365 was hacked and the hacker forwarded all emails per rule to a Gmail account. I checked all relevant PCs and I didn't find any viruses. And I changed the…
Edgar
  • 161
  • 6
4
votes
2 answers

Can opening an email be tracked with a wav file?

I work for a large company and they are currently running a phishing training program. I received one of these "safe" phishing emails and found something I don't really understand. There are several png files and one wav file that are hidden at the…
Mackija
  • 143
  • 3
3
votes
2 answers

Encrypted email from outlook to other

I have recently setup S/MIME in Outlook for my company's employees to send encrypted and digitally signed emails to one another. Is it possible to send encrypted emails to other email platforms from Outlook? If not, then what is the safest way to…
Trevor Kinsella
  • 31
  • 1
3
votes
0 answers

Search function in Outlook and attachements

I am wondering how the search function of Outlook is working, especially in regards to researching key words that are presents in emails attachements. Does the Outlook search function opens the files as it would do in preview mode? Or does it use…
404guest
  • 31
  • 1
3
votes
2 answers

Is 2-factor authentication for webmail useful when e-mail checking through other methods is without 2fa?

I can check my office webmail through https://webmail.example.com. When my username and password match a 5 digit SMS is sent to my phone that has to be entered on the website as well. This way my phone is the second factor. However, on my mobile…
Jeff
  • 3,599
  • 4
  • 17
  • 23
2
votes
2 answers

Can a JWT be all lowercase?

I'm using JWTs as part of an URL in order to direct a user to a specific site. I could have just used a UUID, but it's nice to have an expiry date in the link, as well as knowing whom the link is created for. This has been working great, but when I…
Michael
  • 177
  • 6
2
votes
1 answer

Outlook was redirected to the server clblgn.sceur.ch to get new settings

I (that is, we, our company) has clicked on "Allow" when Outlook has presented us with a redirect to autodiscover-s.outlook.com on our macs to get new settings. Today, we got a popup asking to connect to clblgn.sceur.ch to get new settings. I fear…
pusle
  • 123
  • 4
2
votes
3 answers

How to prevent sharing SSH private keys by email

Is it possible to prevent the sharing of SSH private keys over email (Outlook, in particular), both within and outside of the organisation?
Alex Bramford
  • 21
  • 1
2
votes
0 answers

Extract Outlook email attachments from memory

Does anyone know if there is a way to extract Outlook emails with attachments from memory? What I have tried is to use volatility to dump PST files from memory and then use libpff to recover the attachments from PST files, but for some reason,…
Yang Yu
  • 439
  • 3
  • 5
  • 12
2
votes
2 answers

What are the security risks of using downloadable email vs. remote/online email?

The organization at which I work wants us to download our e-mails rather than use a remote/online service like gmail. I have argued that this is less secure because downloading the e-mails brings the text and any attachments behind our firewall. I…
honeste_vivere
  • 177
  • 6
1
vote
0 answers

How unsafe is EnableUnsafeClientMailRules?

To implement some automatic rules that run scripts in Outlook, you now (following the KB3191883 update in 2017) have to set the EnableUnsafeClientMailRules in the registry. A lot of online tutorials mention to do this, but do not describe the…
Didier L
  • 113
  • 4
1
vote
0 answers

Granting access to mailbox/calendar to another with MFA enabled?

Jane needs access to John's Outlook mailbox and calendar. When Jane attempts to access it (she has his UN & PW) John receives the MFA challenge preventing Jane from accessing it. This works exactly as expected, problem is Jane is the admin assistant…
Alan Inman
  • 11
  • 3
1
2 3