Microsoft has patched an actively exploited Outlook zero-day that lets attackers steal Windows authentication information through a malicious message file. Tracked as CVE-2026-124194, the spoofing vulnerability was released on November 10, 2026. Microsoft, the assigning CNA, rates its maximum severity as Moderate, despite confirmed attacks targeting the flaw. The issue continues a pattern of Outlook […]
This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Read the original article:
Microsoft Outlook Zero-Day Vulnerability Actively Exploited to Steal NTLM Authentication Hashes