ATLAS News · Technology

Microsoft Says Outlook Zero-Day Is Being Exploited to Steal NTLM Hashes

· 2 sources

Microsoft says attackers are exploiting an Outlook spoofing flaw fixed in its November 10, 2026 updates, according to GBHackers News and Mezha.net.

What happened

Microsoft says attackers are actively exploiting a vulnerability in Outlook, according to Mezha.net. GBHackers News describes it as a zero-day used to steal NTLM authentication hashes.

Mezha.net reports that the flaw is an Outlook spoofing vulnerability fixed in Microsoft's security updates of November 10, 2026. The attack requires a victim to open a specially crafted message file.

Mezha.net also reports that the flaw is credited to a researcher who used Claude.

Context

NTLM hashes are credential data used in Windows authentication, and attackers who obtain them can try to misuse them to access accounts.

Why it matters

Active exploitation of a flaw in a widely used Microsoft product may draw attention to the company's security update process and to its enterprise customers.

Stocks in this story

Price changes are shown for the trading day of the story and are a coincidence in time, not proof that the news caused them. Figures are ATLAS data from our database.

MicrosoftMSFT

−2.20%

Technology · NASDAQ

Live price
$523.95▼ -2.20%

live price · USD

Close on November 10
$533.16−2.20% vs. previous close ($545.18)
Fair value (ATLAS)
$522.27Fair range: $357.75 to $610.79The price ($523.95) is 0.3% above that figure: close to its fair value.
Chance of a rise in 1 month
51%Probability of closing higher than today within 21 sessions.Normal range: half of the scenarios end between $494.98 and $555.85; 9 in 10, between $446.63 and $616.03.
See the full ATLAS analysis of Microsoft →

Closing prices, fair value and probabilities: ATLAS own data. How we calculate fair value.

Sources

ATLAS writes its own summaries from the reporting of these outlets. Each link opens the original publisher.

  1. Microsoft Outlook Zero-Day Vulnerability Actively Exploited to Steal NTLM Authentication Hashes · GBHackers News · November 11, 2026
  2. Microsoft says attackers are exploiting Outlook flaw credited to researcher who used Claude · Mezha.net · November 11, 2026

Related

Latest market news · Markets today on ATLAS · Microsoft

What you get with ATLAS

Create my ATLAS account →

Fair value, probabilities and earnings for every stock. Free account, no card. Information, not advice.

Information, not advice. This content is informational and is not an investment recommendation or an offer to buy or sell securities. ATLAS estimates come from statistical models using public data, can be wrong, and past performance does not guarantee future results. Disclaimer

ATLAS Signals

ATLAS Signals, every week

The week in the market, three stocks on ATLAS’s radar and what comes next. Get it every Monday.

By subscribing you agree to receive ATLAS Signals by email every Monday. You can unsubscribe with one click at any time. Privacy