Saint Follina 2, Who Opened Documents and Ran the Rest

Patron of those who open attachments, Office documents, and bug families that do an encore.

Life

In July 2023 BlackBerry and others documented CVE-2023-36884, exploited by the Storm-0978 group: a specially crafted Office document, once opened, led to code execution on the system. A spiritual heir to 2022's Follina, it confirmed that the simplest way in is still to convince someone to open a file. Microsoft gave a mitigation first, then the fix, and the flaw joined CISA's exploited list.

Prayer

O Saint Follina 2, who enters through a document opened in good faith, teach our Office apps not to run what they were only meant to show. Amen.

How to celebrate

Celebrated by installing the Office updates, applying the suggested mitigations, and thinking twice before opening the attachment.

Attachment opened, system offered.