Microsoft has confirmed that hackers are exploiting an Outlook zero-day that can expose Windows authentication information when a user opens a malicious file. Tracked as CVE-2026-124194, the spoofing vulnerability was patched on November 10, 2026. Microsoft marks it “Exploitation Detected” and says it was not publicly disclosed before the update. The flaw carries a CVSS […]
This article has been indexed from Cyber Security News
Read the original article:
Microsoft Confirms Hackers Are Exploiting Outlook 0-Day to Steal Windows Authentication Hashes