{"id":51163,"date":"2016-07-12T12:08:52","date_gmt":"2016-07-12T19:08:52","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=51163"},"modified":"2025-06-03T21:31:38","modified_gmt":"2025-06-04T04:31:38","slug":"patch-now-simple-office-protected-view-bypass-could-have-big-impact","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/","title":{"rendered":"Patch Now: Simple Office &#8216;Protected View&#8217; Bypass Could Have Big Impact"},"content":{"rendered":"<p><a href=\"https:\/\/support.office.com\/en-us\/article\/What-is-Protected-View-d6f09ac7-e6b9-4495-8e43-2bbcdbcb6653\">Protected View<\/a> is a security feature of Microsoft Office. According to <a href=\"https:\/\/labs.mwrinfosecurity.com\/system\/assets\/1015\/original\/Understanding_The_Microsoft_Office_2013_Protected_View_Sandbox.pdf\">research from MWR Labs,<\/a>\u00a0Protected View mode is a strong application-level sandbox. In a real-world attack scenario, Office documents from the Internet, such as downloaded documents from browsers (Chrome, Edge, Internet Explorer), or attachments received on emails clients (such as Outlook), are\u00a0opened by default in Protected View mode, which offers the first line of protection against various Office-based attacks.<\/p>\n<p>Many exploits are delivered in Office file\u00a0formats.\u00a0For example, the Hacking Team <a href=\"https:\/\/wikileaks.org\/hackingteam\/emails\/emailid\/1104078\">was found<\/a>\u00a0to have embedded Flash zero-day exploits into Office documents for a long time. This trick was also used in the recent Flash zero-day attack (CVE-2016-4117). However, if we look closer at the attack scenario, this\u00a0exploit-delivering method usually fails thanks to Protected View. When the &#8220;from the Internet&#8221; document is opened, Protected View blocks the running of the embedded exploit, and a warning tells\u00a0the user telling it is safer to stay in Protected View. (We strongly recommend users not ignore the warning unless they\u00a0really need to edit the file.) See the following screen:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft wp-image-51165 size-full\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/Office_Protected_View-1.png\" width=\"1852\" height=\"199\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Office_Protected_View-1.png 1852w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Office_Protected_View-1-300x32.png 300w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Office_Protected_View-1-768x83.png 768w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Office_Protected_View-1-1024x110.png 1024w\" sizes=\"auto, (max-width: 1852px) 100vw, 1852px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>We have been working with the Microsoft Security Response Center during\u00a0the past several months to address an Office Protected View bypassing bug (CVE-2016-3279) we found. Today, now that Microsoft has finally <a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/security\/ms16-088.aspx\">released a patch<\/a>, we will discuss the details to offer better detection and defense for the community.<\/p>\n<p>The attack is quite simple and the exploit can be packed as a .xla file type, an\u00a0Excel add-in. We found that when a .xla file from the Internet is opened, Protected View does not activate. In other words, Excel uses its normal mode to open the file (probably because Excel considers that .xla files cannot cause harm). Unfortunately, however, the .xla format can contain many types of potentially malicious contents, typically ActiveX or OLE objects, just as\u00a0other well-known formats such as .docx or .xls.<\/p>\n<p>The following screen shows what happens when the user opens a Flash-embedded .xla file downloaded from the Internet. The \u201cZone.Identifier\u201d Alternate Data Stream is set (marking the file as from the Internet), but the Flash binary is still loaded into the Excel process, which suggests the Protected View sandbox is not activated.\u00a0(This version of Excel is running at the Medium integrity level.)<\/p>\n<p><a href=\"https:\/\/securingtomorrow.mcafee.com\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/attachment\/20160712-protected_view_bypass\/\" rel=\"attachment wp-att-51240\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-51240\" src=\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/20160712-Protected_View_Bypass.png\" alt=\"20160712 Protected_View_Bypass\" width=\"1551\" height=\"449\" srcset=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/20160712-Protected_View_Bypass.png 1551w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/20160712-Protected_View_Bypass-300x87.png 300w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/20160712-Protected_View_Bypass-768x222.png 768w, https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/20160712-Protected_View_Bypass-1024x296.png 1024w\" sizes=\"auto, (max-width: 1551px) 100vw, 1551px\" \/><\/a><\/p>\n<p>Thus an an attacker can bypass the first line of protection just by saving an\u00a0Office exploit as an .xla file.<\/p>\n<h2>The Importance of Installing a Patch<\/h2>\n<p>For your defense, we highly recommend that every Office user\u2014whether at work or at home\u2014install the <a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/security\/ms16-088.aspx\">official patch<\/a> as soon as possible. Our NIPS signature, &#8220;0x451bce00\u2014Microsoft Office XLA File Handling Remote Code Execution (CVE-2016-3279),&#8221;\u00a0can detect such an attack. Users who download or receive an .xla file from untrusted sources should be extremely careful before opening the file.<\/p>\n<p><em>Thanks to my colleague Bing Sun for his help with this post.<\/em><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Protected View is a security feature of Microsoft Office. According to research from MWR Labs,\u00a0Protected View mode is a strong&#8230;<\/p>\n","protected":false},"author":610,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[442],"tags":[1411,3923,3952,4185],"coauthors":[2524],"class_list":["post-51163","post","type-post","status-publish","format-standard","hentry","category-mcafee-labs","tag-advanced-persistent-threats","tag-email-and-web-security","tag-internet-security","tag-phishing"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Patch Now: Simple Office &#039;Protected View&#039; Bypass Could Have Big Impact | McAfee Blog<\/title>\n<meta name=\"description\" content=\"Protected View is a security feature of Microsoft Office. According to research from MWR Labs,\u00a0Protected View mode is a strong application-level sandbox.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Patch Now: Simple Office &#039;Protected View&#039; Bypass Could Have Big Impact | McAfee Blog\" \/>\n<meta property=\"og:description\" content=\"Protected View is a security feature of Microsoft Office. According to research from MWR Labs,\u00a0Protected View mode is a strong application-level sandbox.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/\" \/>\n<meta property=\"og:site_name\" content=\"McAfee Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/McAfee\/\" \/>\n<meta property=\"article:published_time\" content=\"2016-07-12T19:08:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-04T04:31:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Office_Protected_View-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1852\" \/>\n\t<meta property=\"og:image:height\" content=\"199\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Haifei Li\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@McAfee\" \/>\n<meta name=\"twitter:site\" content=\"@McAfee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Haifei Li\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/\"},\"author\":{\"name\":\"Haifei Li\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/fd18845cc3f27ed398648df8cc802444\"},\"headline\":\"Patch Now: Simple Office &#8216;Protected View&#8217; Bypass Could Have Big Impact\",\"datePublished\":\"2016-07-12T19:08:52+00:00\",\"dateModified\":\"2025-06-04T04:31:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/\"},\"wordCount\":497,\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/Office_Protected_View-1.png\",\"keywords\":[\"advanced persistent threats\",\"email and web security\",\"internet security\",\"Phishing\"],\"articleSection\":[\"McAfee Labs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/\",\"name\":\"Patch Now: Simple Office 'Protected View' Bypass Could Have Big Impact | McAfee Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/Office_Protected_View-1.png\",\"datePublished\":\"2016-07-12T19:08:52+00:00\",\"dateModified\":\"2025-06-04T04:31:38+00:00\",\"description\":\"Protected View is a security feature of Microsoft Office. According to research from MWR Labs,\u00a0Protected View mode is a strong application-level sandbox.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#primaryimage\",\"url\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/Office_Protected_View-1.png\",\"contentUrl\":\"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/Office_Protected_View-1.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Other Blogs\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"McAfee Labs\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Patch Now: Simple Office &#8216;Protected View&#8217; Bypass Could Have Big Impact\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"name\":\"McAfee Blog\",\"description\":\"Internet Security News\",\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\",\"name\":\"McAfee\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"width\":1286,\"height\":336,\"caption\":\"McAfee\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/McAfee\/\",\"https:\/\/x.com\/McAfee\",\"https:\/\/www.linkedin.com\/company\/mcafee\/\",\"https:\/\/www.youtube.com\/McAfee\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/fd18845cc3f27ed398648df8cc802444\",\"name\":\"Haifei Li\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/88c52c07fcacd190468a32af554e5f36\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/49ae79ecae2f1bff04cb595e12d9cc72?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/49ae79ecae2f1bff04cb595e12d9cc72?s=96&d=mm&r=g\",\"caption\":\"Haifei Li\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/haifeili\/\"],\"url\":\"https:\/\/www.mcafee.com\/blogs\/author\/haifei-li\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Patch Now: Simple Office 'Protected View' Bypass Could Have Big Impact | McAfee Blog","description":"Protected View is a security feature of Microsoft Office. According to research from MWR Labs,\u00a0Protected View mode is a strong application-level sandbox.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Patch Now: Simple Office 'Protected View' Bypass Could Have Big Impact | McAfee Blog","og_description":"Protected View is a security feature of Microsoft Office. According to research from MWR Labs,\u00a0Protected View mode is a strong application-level sandbox.","og_url":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/","og_site_name":"McAfee Blog","article_publisher":"https:\/\/www.facebook.com\/McAfee\/","article_published_time":"2016-07-12T19:08:52+00:00","article_modified_time":"2025-06-04T04:31:38+00:00","og_image":[{"width":1852,"height":199,"url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/Office_Protected_View-1.png","type":"image\/png"}],"author":"Haifei Li","twitter_card":"summary_large_image","twitter_creator":"@McAfee","twitter_site":"@McAfee","twitter_misc":{"Written by":"Haifei Li","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#article","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/"},"author":{"name":"Haifei Li","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/fd18845cc3f27ed398648df8cc802444"},"headline":"Patch Now: Simple Office &#8216;Protected View&#8217; Bypass Could Have Big Impact","datePublished":"2016-07-12T19:08:52+00:00","dateModified":"2025-06-04T04:31:38+00:00","mainEntityOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/"},"wordCount":497,"publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#primaryimage"},"thumbnailUrl":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/Office_Protected_View-1.png","keywords":["advanced persistent threats","email and web security","internet security","Phishing"],"articleSection":["McAfee Labs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/","url":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/","name":"Patch Now: Simple Office 'Protected View' Bypass Could Have Big Impact | McAfee Blog","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#primaryimage"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#primaryimage"},"thumbnailUrl":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/Office_Protected_View-1.png","datePublished":"2016-07-12T19:08:52+00:00","dateModified":"2025-06-04T04:31:38+00:00","description":"Protected View is a security feature of Microsoft Office. According to research from MWR Labs,\u00a0Protected View mode is a strong application-level sandbox.","breadcrumb":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#primaryimage","url":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/Office_Protected_View-1.png","contentUrl":"https:\/\/securingtomorrow.mcafee.com\/wp-content\/uploads\/Office_Protected_View-1.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/patch-now-simple-office-protected-view-bypass-could-have-big-impact\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.mcafee.com\/blogs\/"},{"@type":"ListItem","position":2,"name":"Other Blogs","item":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/"},{"@type":"ListItem","position":3,"name":"McAfee Labs","item":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/"},{"@type":"ListItem","position":4,"name":"Patch Now: Simple Office &#8216;Protected View&#8217; Bypass Could Have Big Impact"}]},{"@type":"WebSite","@id":"https:\/\/www.mcafee.com\/blogs\/#website","url":"https:\/\/www.mcafee.com\/blogs\/","name":"McAfee Blog","description":"Internet Security News","publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.mcafee.com\/blogs\/#organization","name":"McAfee","url":"https:\/\/www.mcafee.com\/blogs\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","width":1286,"height":336,"caption":"McAfee"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/McAfee\/","https:\/\/x.com\/McAfee","https:\/\/www.linkedin.com\/company\/mcafee\/","https:\/\/www.youtube.com\/McAfee"]},{"@type":"Person","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/fd18845cc3f27ed398648df8cc802444","name":"Haifei Li","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/88c52c07fcacd190468a32af554e5f36","url":"https:\/\/secure.gravatar.com\/avatar\/49ae79ecae2f1bff04cb595e12d9cc72?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/49ae79ecae2f1bff04cb595e12d9cc72?s=96&d=mm&r=g","caption":"Haifei Li"},"sameAs":["https:\/\/www.linkedin.com\/in\/haifeili\/"],"url":"https:\/\/www.mcafee.com\/blogs\/author\/haifei-li\/"}]}},"_links":{"self":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/51163","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/users\/610"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/comments?post=51163"}],"version-history":[{"count":2,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/51163\/revisions"}],"predecessor-version":[{"id":215039,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/51163\/revisions\/215039"}],"wp:attachment":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/media?parent=51163"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/categories?post=51163"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/tags?post=51163"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/coauthors?post=51163"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}