Microsoft warns of Outlook vulnerability exposing users' authentication data

TechnologyInternationalRevista SemanaNov 12, 2026, 9:26 PMAI summary

Microsoft warned about an Outlook vulnerability, identified as CVE-2026-124194, that is being exploited by cybercriminals. An attacker sends a manipulated message file and, if the victim opens it, Outlook can connect to an external server controlled by the attacker without showing the usual external content warning, potentially revealing authentication information such as the NTLMv2 hash. The company released fixes for affected versions and CISA added the flaw to its catalog of actively exploited vulnerabilities.

In 35 seconds

Flaw CVE-2026-124194 lets Outlook connect to an attacker-controlled server without showing the external content warning.
Exposed information may include the NTLMv2 hash, used to impersonate the user.
Microsoft says exploitation requires network connectivity and the user opening the file; the preview pane is not an attack path.

Read the full story at Revista Semana

IASummary generated by artificial intelligence from a story by Revista Semana. It may contain errors: the original source prevails.

Microsoft
Outlook
ciberseguridad
vulnerabilidad
CISA

Comments

Be respectful. Comments reported by several people are hidden until a moderator reviews them.

You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.

Keep reading

Data center capacity in Spain grew 24% and could multiply sixfold by 2030
Installed capacity in commercial data centers in Spain closed last year at 439 megawatts, 24% more, according to Spain DC. If the trend holds, it would exceed 2,500 megawatts by 2030, with planned investment of 66.9 billion euros. The head of ACCIONA's data center area, José Gabriel Martín Fernández, rules out a demand bubble and speaks of an oversized project pipeline: about 12 gigawatts have been granted versus roughly 3 expected for 2030.
TechnologyInternationalLa VanguardiaNov 12AI
Trump urged Jensen Huang to hold on at Nvidia before his resignation
Donald Trump phoned Jensen Huang to encourage him to hold on at the helm of Nvidia amid the scandal over his extramarital affairs, one of them with an alleged spy, according to The New York Times. Two days later, Huang resigned at the request of the board. The FBI is investigating the case, and a May intelligence report flagged suspicions about his link to Alice Huang, a businesswoman suspected of moving Nvidia chips to China. Trump called him an "extraordinary talent" and proposed Tim Cook as his replacement.
TechnologyInternationalEL PAÍSNov 12AI
FBI warns about "FaceStealer": North Korean hackers stole over US$400 million in crypto using fake video calls
The FBI identified a social engineering campaign, dubbed "FaceStealer", through which North Korean hackers allegedly stole more than 400 million dollars in cryptocurrencies over the past 18 months. Attackers send video call invitations from stolen accounts and play recordings or AI-generated videos of people the victim knows. They then simulate a technical failure and offer a link that installs malicious software. The operation also targeted people working on open-source software. The FBI seized the cloud infrastructure used in the campaign.
TechnologyInternationalRevista SemanaNov 12AI
Drone attacks in Colombia: 361 so far this year, one every 21 hours
Colombia has recorded 361 attacks with explosive-laden drones so far this year, roughly one every 21 hours, according to an opinion column published by El País of Cali. Cauca accounts for about 58% of the cases, with municipalities including Argelia, Suárez, El Tambo, Cajibío, Caloto and Inzá among those affected. Between January and September, 25 uniformed personnel were killed and more than 340 wounded. The text attributes the attacks to the ELN and dissident factions of the former FARC and calls for accelerating anti-drone systems.
TechnologyColombiaEl País (Cali)Nov 12AI

Microsoft warns of Outlook vulnerability exposing users' authentication data

In 35 seconds

Comments

Keep reading

Data center capacity in Spain grew 24% and could multiply sixfold by 2030

Trump urged Jensen Huang to hold on at Nvidia before his resignation

FBI warns about "FaceStealer": North Korean hackers stole over US$400 million in crypto using fake video calls

Drone attacks in Colombia: 361 so far this year, one every 21 hours