Cybersecurity agencies have issued urgent advisories after Microsoft patched over 1,000 flaws in its November security rollout—including CVE-2026-124194, an actively exploited zero-day spoofing vulnerability in Microsoft Outlook. Threat actors can trick users into opening specially crafted message files to silently harvest authentication credentials over a network. The security alert coincided with widespread service degradations across Exchange Online, Outlook, and Microsoft Teams, prompting IT administrators worldwide to prioritize immediate patch deployment.
About the Author
