[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fG9_N4g3R_7acTwLLYRY2qj0KJzcwJQW5kKkC4CPS4nw":3},{"article":4,"iocs":44,"watch_terms":49,"solutions":50,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"f8271420-b53d-45c8-aa65-be13d83d5f3b","Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day","microsoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day-70a133","Today is Microsoft's November 2026 Patch Tuesday, with security updates addressing a record-breaking 1,235 flaws, including one actively exploited Microsoft Outlook zero-day vulnerability. [...]","Microsoft's November 2026 Patch Tuesday addresses a record 1,235 vulnerabilities, including one actively exploited zero-day in Microsoft Outlook. The updates include 66 'Critical' vulnerabilities, with 48 allowing Remote Code Execution. The zero-day, CVE-2026-124194, is a spoofing vulnerability that could disclose NTLM account hashes when a user opens a crafted message file.","Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, including an actively exploited Outlook zero-day.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fmicrosoft\u002Fmicrosoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2024\u002F10\u002F08\u002Fpatch_tuesday_microsoft.jpg","2026-11-10T19:07:36+00:00","2026-11-10T20:00:19.6542+00:00",8,[17,20,22,25,27,29],{"name":18,"type":19},"Microsoft Outlook","product",{"name":21,"type":19},"Microsoft Edge",{"name":23,"type":24},"Microsoft","vendor",{"name":26,"type":19},"Entra Device Registration",{"name":28,"type":19},"Connect Secure",{"name":30,"type":24},"Cisco","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},[45],{"type":46,"value":47,"context":48},"cve","CVE-2026-124194","Microsoft Outlook Spoofing Vulnerability",[23,30,18],{"controls":51,"vendors":138},[52,81,109],{"slug":53,"name":54,"problem":55,"products":56},"patch-management","Automated patch management","Known holes get closed in days, not months.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":82,"name":83,"problem":84,"products":85},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":103,"vendor_name":23,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"slug":110,"name":111,"problem":112,"products":113},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[114,122,130],{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","core-email-protection","Proofpoint Core Email Protection","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection","Email filtering for phishing, malware and business email compromise.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"mimecast","Mimecast","\u002Fvendor-logos\u002Fmimecast.png","mimecast-email-security","Mimecast Email Security","https:\u002F\u002Fwww.mimecast.com\u002Fproducts\u002Femail-security\u002F","Email filtering, impersonation protection and continuity.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.",[139],{"slug":103,"name":23,"logo_path":104,"roles":140},[141],"affected",{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":152},"record-patch-tuesday-highlights-dangers-of-delayed-patching-and-ntlm-credential-exposure","Record Patch Tuesday Highlights Dangers of Delayed Patching and NTLM Credential Exposure","Microsoft's November 2026 Patch Tuesday addressed a record 1,235 vulnerabilities, including an actively exploited zero-day in Outlook (CVE-2026-124194) that leaks NTLM account hashes simply by opening a crafted message file. The sheer volume of critical patches — 66 rated Critical, 48 enabling Remote Code Execution — illustrates how quickly an unpatched estate becomes an attractive target. NTLM hash disclosure is particularly dangerous because hashes can be relayed or cracked offline to gain unauthorized access to systems and networks. Organizations that lack timely patching processes or treat Patch Tuesday as optional maintenance risk giving attackers a wide-open window between disclosure and remediation.",[147,148,149,150,151],"CIS Control 7: Continuous Vulnerability Management (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks","NIS2 Article 21(2)(e)","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities",{"NIS2 Article 21(2)(e)":153,"NIST SP 800-53 SI-2: Flaw Remediation":154,"CIS Control 7: Continuous Vulnerability Management (v8)":155,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":156,"NIST CSF 2.0 RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks":157},"NIS2 Article 21(2)(e) covers vulnerability handling and disclosure practices, requiring entities to have processes that ensure timely remediation of vulnerabilities such as the actively exploited Outlook zero-day.","SI-2 mandates that organizations identify, report, and correct information system flaws in a timely manner, which would have driven rapid deployment of the Outlook zero-day patch before exploitation could occur.","CIS Control 7 requires establishing a patching and vulnerability remediation process with defined timelines — directly addressing the risk of leaving 1,235 flaws, including an actively exploited zero-day, unpatched.","A.8.8 requires organizations to obtain timely information about technical vulnerabilities and take appropriate measures, which would include prioritizing and tracking remediation of Critical-rated and zero-day patches from Patch Tuesday.","This category requires active mitigation of newly disclosed vulnerabilities, directly applicable to the window between Microsoft's patch release and an organization completing deployment of the Outlook fix."]