AI & Enterprise
Microsoft warns Outlook users to update after zero-day flaw exploited
Microsoft has fixed an Outlook security vulnerability that it confirmed was exploited in real cyberattacks and urged users to update quickly. The flaw can allow a crafted message file to trigger an external connection without warning and potentially expose an NTLMv2 hash used for Windows authentication. Microsoft rated it CVSS 6.5 and medium severity. Affected products include Microsoft 365 Apps for enterprise and Office LTSC 2021 and 2024.
