Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft

Microsoft Confirms Hackers Are Exploiting Outlook 0-Day to Steal Windows Authentication Hashes

Microsoft has confirmed that hackers are exploiting an Outlook zero-day that can expose Windows authentication information when a user opens a malicious file. Tracked as CVE-2026-124194, the spoofing vulnerability was patched on November 10, 2026. Microsoft marks it “Exploitation Detected” and says it was not publicly disclosed before the update. The flaw carries a CVSS […]

Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft

Microsoft’s October 2026 Patch Tuesday updates fix over 1,000 vulnerabilities, including an exploited Outlook zero-day, CVE-2026-124194.