Microsoft shows weight edits can hide backdoors in AI agents
Changing fewer than 10 dormant neurons can make a triggered agent run attacker code; Microsoft has not seen this used.
Stories per day · 30 days
35 RSS
Relatedpatch-tuesday45windows43outlook25phishing16windows-1115zero-day14exchange13ntlm13ai-agents12rce10cve-2026-969519remote-code-execution9storm-29908yam-store8credential-theft7dotnet7nvidia7office7
520 stories, newest first · one card per story
Stories tagged #microsoft
Microsoft discloses Active Directory remote code execution and denial-of-service flaws
Both Important-rated flaws need low privileges; the record does not show an active exploitation campaign.
Microsoft Patch Tuesday fixes Outlook flaw already under attack
Opening a crafted Outlook message can leak an NTLMv2 hash via CVE-2026-124194; a separate Windows Search RCE is not reported as exploited.
Microsoft releases Windows 10 KB5131096 extended security update
The update reaches build 19045.7846, or 19044.7846 on Enterprise LTSC 2021, and includes November Patch Tuesday fixes.
Microsoft fixes 1235 flaws, including exploited Outlook zero-day
CVE-2026-124194 can leak NTLMv2 hashes from Microsoft 365 Apps and Office LTSC 2021 and 2024 after one opened message file.
Microsoft November patches fix 1,090 flaws, one Outlook bug exploited
CVE-2026-124194 can leak an NTLMv2 hash if a user opens a crafted Outlook file; ZDI flags 30 wormable bugs.
Microsoft patches 1,259 flaws, including exploited Outlook bug
Opening a crafted message can leak an NTLMv2 hash without Outlook’s usual warning.
Microsoft November 2026 patches fix 1235 flaws, one exploited in Outlook
CISA added Outlook spoofing flaw CVE-2026-124194 to KEV and set a November 24, 2026 patch deadline.
1
Microsoft November 2026 patches critical RCEs and an exploited Outlook flaw
Only CVE-2026-124194, a moderate Outlook spoofing bug, is marked exploited; builds and fixes are not listed.
1
Patched Outlook flaw CVE-2026-124194 leaks NTLMv2 hashes in attacks
Opening a crafted message can leak an NTLMv2 hash without the usual external-content warning; it is not zero-click.
November Patch Tuesday fixes exploited Outlook NTLM hash-theft flaw
Attackers already use CVE-2026-124194, CVSS 6.5, which leaks an NTLMv2 hash after a user opens a malicious Office file.
2
Microsoft November 2026 patches fix 1095 flaws, one exploited
Only CVE-2026-124194, an Outlook spoofing bug scored 6.5, is exploited; 48 of 64 critical issues are remote code execution.
2
Microsoft November patches fix 1,094 bugs, one exploited
CVE-2026-124194 can leak an Outlook user’s NTLMv2 hash; two zero-click remote code execution bugs also ship.
Microsoft November patches include exploited Outlook flaw CVE-2026-124194
The release covers 1,093 flaws, 63 rated critical, plus Exchange, SharePoint, Windows Search, and LDAP bugs.
November 2026 Patch Tuesday lists dozens of Microsoft flaws
The excerpt lists 57 CVEs, including CVSS 9.8 remote code execution bugs rated exploitation less likely.
Microsoft November 2026 Patch Tuesday covers dozens of Windows flaws
The visible Rapid7 list includes several 9.8 remote code execution bugs; each entry is marked not publicly disclosed.
Microsoft November patches list 1,094 CVEs; one Outlook flaw exploited
CISA added the exploited Outlook spoofing bug to KEV; a Windows Search flaw is called zero-click code execution.
Microsoft Patch Tuesday discloses 1,093 bugs, including exploited Outlook flaw
CISA ordered agencies to patch exploited Outlook, Barracuda and other bugs, with Outlook due by month’s end.
Microsoft November patches cover 1,260 flaws, one Outlook bug exploited
SANS says 68 issues are critical and CVE-2026-124194, an Outlook spoofing bug, is already exploited.
November Patch Tuesday fixes 1,235 flaws and an Outlook zero-day
Opening a crafted Outlook message can leak an NTLMv2 hash to an attacker-controlled share.
1
ZDI lists November 2026 Microsoft fixes, one Outlook bug exploited
CVE-2026-124194 is the only listed flaw marked exploited; it is a Moderate CVSS 6.5 spoofing bug.
Microsoft November 2026 update fixes 1,093 flaws, one Outlook zero-day
Opening a crafted file can leak an NTLMv2 hash; the Preview Pane is not an attack vector.
Microsoft November 2026 Patch Tuesday fixes 1093 CVEs, one exploited
Outlook spoofing CVE-2026-124194, used as a zero-day, leaks NTLMv2 hashes when a crafted Office file is opened.
1
Microsoft releases November 2026 Windows 11 cumulative updates
The mandatory packages cover hundreds of previously found flaws plus File Explorer, AutoPlay, Magnifier, and taskbar changes.
1