Microsoft confirms Outlook security flaw exploited by cybercriminals, unlinked to global outage

TechnologyInternationalBioBioChileNov 13, 2026, 7:33 AMAI summary

Microsoft confirmed a spoofing vulnerability in Outlook, identified as CVE-2026-124194, that was being actively exploited by cybercriminals. An unauthenticated attacker can send a specially crafted file that, once opened, lets Outlook connect to an attacker-controlled network location and expose the user's NTLMv2 hash. The company released a security update on November 10. The flaw coincided with an outage of more than 12 hours affecting Microsoft 365 services, which the company attributed to process overload on some servers and did not link to the attack.

In 40 seconds

Flaw CVE-2026-124194 is an Outlook spoofing issue that Microsoft acknowledged on November 10 and that was already being exploited in attacks.
The attack requires the victim to open a crafted file; the Preview Pane is not an exploitation path.
It could expose the user's NTLMv2 hash, a Windows authentication credential used to attempt identity impersonation.

Read the full story at BioBioChile

IASummary generated by artificial intelligence from a story by BioBioChile. It may contain errors: the original source prevails.

Microsoft
Outlook
ciberseguridad
vulnerabilidad
Microsoft 365

Comments

Be respectful. Comments reported by several people are hidden until a moderator reviews them.

You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.

Keep reading

Banking, insurance and telecom account for 61% of operations with virtual assistants in Colombia
Banking, financial services, insurance and telecommunications account for 61% of operations with virtual assistants in Colombia, according to a Vozy study. These tools automate calls, manage collections and resolve user requests. Its CEO, Humberto Pertuz, reported reductions of more than 70% in management costs versus manual methods and a 95% increase in processed calls compared with October 2025. The 2026 Latin American Artificial Intelligence Index ranks Colombia fourth in the region, behind Chile, Brazil and Uruguay.
TechnologyColombiaLa FM8:32 AMAI
Global outage hit Microsoft's Outlook, Teams and Copilot; company rules out cyberattack
A global Microsoft services outage affected Microsoft 365, including Outlook, Teams and Copilot, with connectivity problems across several regions. Downdetector logged 140,000 users in 74 countries reporting Outlook issues on Thursday night. Microsoft ruled out a cybersecurity incident and attributed the failure to "high load" on its infrastructure, after numerous servers became "unexpectedly inaccessible." The company reported "encouraging recovery progress in Europe" and warned some users may still see intermittent problems.
TechnologyInternationalBBC8:17 AMAI
Experts call for corporate responsibility over intimate deepfakes of women
Experts consulted warn about the use of artificial intelligence to generate intimate images of women without their consent and call for companies that market and enable these tools to take responsibility through fines and sanctions. They note that models can generate almost any content while the product decides what to filter, and that filtering has a cost. A cybercrime lawyer recommends victims preserve evidence and seek psychological and legal advice.
TechnologyInternationalAmbito7:26 AMAI
Microsoft keeps global outages in Outlook, Teams and Copilot and extends email wait to 48 hours
Microsoft continued this Friday with failures in services such as Outlook, Teams and Copilot after a massive disruption that began Thursday due to a "high load" on its infrastructure. The company reported progress in recovery, especially in Asia-Pacific, and keeps a 48-hour waiting period in place to protect pending emails. The incident affected the UK's NHS, New Zealand's and Japan's ministries, and banks, courts and government offices in several countries. Microsoft has no evidence of malicious activity.
TechnologyInternationalEl Tiempo7:24 AMAI

Microsoft confirms Outlook security flaw exploited by cybercriminals, unlinked to global outage

In 40 seconds

Comments

Keep reading

Banking, insurance and telecom account for 61% of operations with virtual assistants in Colombia

Global outage hit Microsoft's Outlook, Teams and Copilot; company rules out cyberattack

Experts call for corporate responsibility over intimate deepfakes of women

Microsoft keeps global outages in Outlook, Teams and Copilot and extends email wait to 48 hours