Anyone using a Windows 11-powered laptop or desktop PC would be wise to check their settings without delay.Microsoft has just confirmed its latest Patch Tuesday release, and it's another massive update that fixes a whopping 1,094 issues with this popular operating system.If that wasn't bad enough, 63 of the bugs have been given a 'Critical' rating, and one has been confirmed as a 'zero-day' bug.Microsoft introduces Windows 11 in 2021 For those not aware, a zero-day basically means hackers are already exploiting the issue to attack users in the real world.
Article continues below ADVERTISEMENTThis worrying gremlin, named CVE-2026-124194, affects Microsoft's popular Outlook software and is targeting users via specially crafted files.If opened, the hacker can then attempt to impersonate the user."An unauthenticated attacker could send a specially crafted message file and convince a user to open it in an affected version of Microsoft Outlook," warns Microsoft."Opening the file could cause Outlook to connect to an attacker-controlled network location without displaying the usual external-content warning, potentially disclosing authentication information that could be used to impersonate the user.Exploitation requires network connectivity and user interaction." Article continues below ADVERTISEMENTThis latest Patch Tuesday follows Microsoft's record-breaking update last month, which fixed over 1,400 flaws in Windows.
Article continues below ADVERTISEMENTWith so many issues being fixed, these are now updates that should be ignored and those using Windows must check their settings, install any pending software and restart their PCs immediately.To install the latest Microsoft updates, click Start, open Settings and select Windows Update.Click Check for updates, then choose Download and install.Restart your PC if prompted to complete the process.
Anyone with a Gmail account urged to follow new 2 minute email rule Watch out BT, a major rival is launching the "UK’s fastest" Wi-Fi Tech news, reviews and latest gadgets plus selected offers and competitions I would like to receive emails from the Daily Express featuring our latest products, services, offers, and promotions from across the Reach Plc family.Subscribe Invalid email You agree you are 18 or over.We use your sign-up to provide content in ways you've consented to and to improve our understanding of you.
This may include adverts from us and third parties based on our knowledge of you.You can unsubscribe at any time.More Info."Microsoft’s November 2026 Patch Tuesday delivers another exceptionally large update cycle, with 1,093 patches, including 63 critical vulnerabilities and 1 actively exploited zero-day," explained Jack Bicer, Director of Vulnerability Research at Action1."While that is down from October’s record-breaking 1,409 patches, it still marks the third consecutive month with patch volumes at levels that would have been extraordinary earlier this year."CVE-2026-124194, an actively exploited vulnerability, is a spoofing flaw in Microsoft Outlook that attackers are already using."Email is the easiest door into any company, and this flaw turns one opened file into a stolen identity.
A captured hash can let an attacker sign in as the victim, read their data, and move to other systems they can reach.If the victim is an administrator or a finance user, the damage grows fast.Because the warning users are trained to watch for never appears, even careful staff can be caught."
Read More