Microsoft’s November 2026 Patch Tuesday is a record 1,235 flaws, including one exploited zero-day in Outlook, BleepingComputer reports. Sixty-six are rated Critical. October was even larger (1,411), as Microsoft keeps using AI to find and fix bugs.
The exploited bug is CVE-2026-124194, an Outlook spoofing issue. Microsoft says an unauthenticated attacker could send a crafted message that, if a user opens it, makes Outlook connect out without the usual warning and could disclose authentication information. Apply the updates; I’m not going through the technique.
What to do
Install this month’s Windows and Microsoft 365 updates, especially on any box that runs Outlook. Don’t open unexpected attachments while you’re catching up.
God Bless, and Use the Source!
