CISA Confirms Active Exploitation of Outlook User Interaction 0-Day Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency has confirmed active exploitation of a Microsoft Outlook zero-day vulnerability CVE-2026-124194 that can expose user authentication data. According to Microsoft’s security advisory, an attacker can send a specially crafted message file and persuade a victim to open it in Outlook. The application may then connect to an attacker-controlled […]

Read the original article:

CISA Confirms Active Exploitation of Outlook User Interaction 0-Day Vulnerability