Exploiting Outlook RCE: A Deep Dive into SecTor 2025’s Signature of Destruction

Outlook RCE vulnerabilities continue to be a critical threat vector for organizations worldwide, with roaming signatures and cloud-based settings introducing new avenues for attackers to exploit. Following his acclaimed SecTor 2025 session, Michael Gorelik, CTO and Head of Malware Research at Morphisec, will lead an in-depth exploration of recent vulnerabilities, including CVE-2025-21357 and CVE-2025-41176, and their implications for enterprise security.
Moderated by Brad LaPorte, this webinar will not only analyze the attack techniques presented at SecTor but will also provide actionable insights to protect your organization from similar threats.

What to Expect:

• Discover The Anatomy of Outlook Exploits: A deep dive into the vulnerabilities exposed in CVE-2025-21357 and CVE-2025-41176, including improper pathname sanitization and roaming signature exploitation.
• Learn About Roaming Signatures Vulnerabilities: Explore how attackers leverage Outlook’s cloud-based roaming signatures for persistence and backdooring, and why improper sanitization remains a major security gap.
• Watch a Live Demonstration: Watch as Michael Gorelik demonstrates the exploitation lifecycle from attacker to victim, showcasing real-world attack scenarios and their impact.
• Hear Research Directions and Recommendations: Learn about new attack surfaces discovered during SecTor research, including unsanitized APIs, non-standard file types, and <img>-based information disclosure risks.
• Gain Actionable Defense Strategies: Gain practical recommendations to secure your organization, including patching, monitoring sync anomalies, and implementing defense-in-depth measures like MFA and least privilege.

Why Attend?

• Learn from the Expert: Get exclusive insights from Michael Gorelik, one of the leading voices in vulnerability research and incident response.
• Understand Emerging Threats: Stay ahead of attackers by understanding the latest exploitation techniques targeting Outlook’s cloud and local settings.
• Strengthen Your Defenses: Walk away with actionable recommendations to mitigate risks and protect your organization from similar vulnerabilities.

Reserve Your Spot Today

Seats are limited—don’t miss this opportunity to gain exclusive insights into Outlook RCE exploits and how to defend against them.