Outlook zero-day CVE-2026-124194 exploited to steal NTLMv2 hashes
Microsoft has patched an actively exploited Outlook zero-day, tracked as CVE-2026-124194, that lets attackers steal Windows authentication material by delivering a malicious message file. The...