Global Microsoft Outlook outage reported as U.S. cybersecurity agency confirms active exploitation of security flaw - 620 CKRM
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed hackers are actively exploiting a security vulnerability in Microsoft Outlook that could expose users' authentication information.
The vulnerability, identified as CVE-2026-124194, allows attackers to bypass certain security warnings within the popular email application, potentially exposing sensitive authentication data. According to a Microsoft security advisory, an attacker can exploit the vulnerability by sending a specially crafted message file and convincing a recipient to open it in Outlook.
Security Flaw Details
Once opened, the application may automatically connect to a network location controlled by the attacker without displaying its usual security warning about external content. The flaw could allow attackers to access authentication information that would ordinarily be protected by Outlook's security measures.
Microsoft released security updates for an actively exploited Outlook network-spoofing flaw (CVSS 6.5) that allows unauthenticated attackers to spoof networks.
User Response
Microsoft has released security updates to address the vulnerability, which has been assigned a severity score of 6.5 out of 10 under the Common Vulnerability Scoring System. The company classifies the issue as a network-spoofing vulnerability that can be exploited by an attacker without first authenticating to the targeted system.
CISA's confirmation of active exploitation indicates the vulnerability is being used in real-world attacks rather than existing solely as a theoretical security risk. Users and organizations running affected versions of Outlook are encouraged to install the available security updates and exercise caution when opening unexpected or suspicious message files.
Related
