Microsoft Says Outlook Zero-Day Is Being Exploited to Steal NTLM Hashes
· 2 sources
Microsoft says attackers are exploiting an Outlook spoofing flaw fixed in its November 10, 2026 updates, according to GBHackers News and Mezha.net.
What happened
Microsoft says attackers are actively exploiting a vulnerability in Outlook, according to Mezha.net. GBHackers News describes it as a zero-day used to steal NTLM authentication hashes.
Mezha.net reports that the flaw is an Outlook spoofing vulnerability fixed in Microsoft's security updates of November 10, 2026. The attack requires a victim to open a specially crafted message file.
Mezha.net also reports that the flaw is credited to a researcher who used Claude.
Context
NTLM hashes are credential data used in Windows authentication, and attackers who obtain them can try to misuse them to access accounts.
Why it matters
Active exploitation of a flaw in a widely used Microsoft product may draw attention to the company's security update process and to its enterprise customers.
Stocks in this story
Price changes are shown for the trading day of the story and are a coincidence in time, not proof that the news caused them. Figures are ATLAS data from our database.
$522.27Fair range: $357.75 to $610.79The price ($523.95) is 0.3% above that figure: close to its fair value.
Chance of a rise in 1 month
51%Probability of closing higher than today within 21 sessions.Normal range: half of the scenarios end between $494.98 and $555.85; 9 in 10, between $446.63 and $616.03.
Fair value, probabilities and earnings for every stock. Free account, no card. Information, not advice.
Information, not advice. This content is informational and is not an investment recommendation or an offer to buy or sell securities. ATLAS estimates come from statistical models using public data, can be wrong, and past performance does not guarantee future results. Disclaimer
ATLAS Signals
ATLAS Signals, every week
The week in the market, three stocks on ATLAS’s radar and what comes next. Get it every Monday.
By subscribing you agree to receive ATLAS Signals by email every Monday. You can unsubscribe with one click at any time. Privacy