Outlook attacks raise urgency across a massive Microsoft update
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Thursday, November 12th, 2026.
Authentication information is at risk through an Outlook weakness that attackers are already exploiting. A target must open a specially crafted message file. That action can make Outlook connect to an attacker-controlled network location without displaying its usual external-content warning.
Microsoft’s November release addresses one thousand ninety five vulnerabilities, including 64 rated critical and 48 critical code-execution issues. The exploited Outlook weakness can expose NTLMv2 authentication information that may help an attacker impersonate the user. Importantly, the Outlook fix is delivered through affected Office products, so Windows updates alone may not provide coverage.
For leaders, Office needs to be included in the emergency patch decision rather than hidden behind general Windows update reporting. For defenders, the exploited Outlook issue should take priority while other critical fixes are tested against business systems. The larger lesson is that patch counts matter less than exploitation status, exposure, and attack requirements.
Deploy the affected Office updates promptly and verify Outlook coverage separately from Windows patch status.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
