Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

thehackernews.com Nov 11, 2026

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Curated by Shubham · TechCapsules · Nov 11, 2026

AI-summarised brief · reviewed before publication

Microsoft released patches for 1,259 vulnerabilities across its product line, marking the second month in a row with over 1,000 flaws addressed. The updates cover 726 Windows issues, 174 Office bugs, 61 Developer Tools, 59 SQL Server, 53 additional Developer Tools, and 27 SharePoint Server defects, plus 165 non‑Microsoft CVE IDs. More than 500 of the flaws enable elevation of privilege, while others allow remote code execution or information disclosure. Among them, a moderate‑severity Outlook bug (CVE‑2026‑124194, CVSS 6.5) is actively exploited; a crafted message file can bypass Outlook’s external‑content warning, leaking NTLMv2 hashes that enable credential theft. The vulnerability was reported by researcher Nono and Anthropic’s Benoît Sevens. CISA added the flaw to its KEV catalog, mandating federal remediation by 24 Nov 2026.

💡 Why It Matters

· Exploiting a single Outlook click can hand attackers a user’s authentication hash, opening pathways to any system the victim can access.
· Federal agencies now face a hard deadline to block that route.

Read full article on thehackernews.com

Microsoft ends support for Windows 11 version 23H2 after three years

Microsoft announced the final end of support for Windows 11 version 23H2 on November 2026, marking the conclusion of a three‑year security update cycle for Enterprise and Education editions. The last patch, KB5131087, was released earlier this month, after which devices running this build will no longer receive monthly security fixes. The version, launched in October 2023, had already been retired for Home and Pro users last year, leaving only commercial SKUs on the support timeline. Microsoft urges organizations and schools to migrate to newer releases—currently 24H2, 25H2, 26H1, or 26H2—to maintain protection. The company’s policy provides two years of updates for consumer builds and three years for commercial ones, with LTSC and IoT as exceptions.

💡 Enterprises that postpone upgrades now face unpatched vulnerabilities, forcing immediate IT action to safeguard critical systems.

windowslatest.com · Nov 11

Windows 11 KB5132061 is out with new features, direct download links for…

Microsoft released the November 2026 Patch Tuesday update KB5132061 for Windows 11, adding a customizable right‑click context menu and performance improvements for browsers such as Edge and Firefox. The mandatory security update, version 26300.9974 for 26H2 and 26200.9974 for 25H2, installs automatically via Windows Update and is also available as an offline .msu installer. The update is 5 GB in size, reflecting the inclusion of AI models, and is part of a broader rollout that includes .NET and malware removal tool updates.

💡 The new context‑menu feature streamlines user workflows, while the larger, AI‑bundled update signals Microsoft’s shift toward more integrated, data‑driven functionality in Windows 11.

windowslatest.com · Nov 11

I tested Windows 11 November 2026 update, here’s what’s new, improved, and…

Microsoft released the November 2026 Patch Tuesday update (KB5132061) for Windows 11, advancing 26H2 to Build 26300.9974 and 25H2 to Build 26200.9974. The mandatory security update incorporates all changes from the optional October 28 update (KB5127936). Key improvements include an instantly opening, customizable right‑click menu, faster Edge launches, smoother taskbar preview animations, and memory enhancements that allow 8 GB laptops to retain up to 2 GB more active data. The update also adds several accessibility, privacy, and performance fixes across the OS.

💡 The update delivers a tangible boost to everyday productivity by slashing menu load times and freeing memory on low‑RAM devices, directly addressing long‑standing user complaints about sluggishness. It also signals Microsoft’s commitment to incremental, user‑centric refinements, reinforcing Windows 11’s viability for budget hardware.

news.microsoft.com · Nov 11

The Ohio State University and Microsoft announce five-year strategic partnership to accelerate…

The Ohio State University Wexner Medical Center and Microsoft Corp. have launched a five‑year strategic partnership to fuse the university’s clinical, research and educational expertise with Microsoft’s AI and cloud platforms. The collaboration will co‑develop a “smart hospital” model that integrates facility, operational and clinical‑support systems, initially deployed at the Richard M. Ross Heart Hospital and James Outpatient Care facility, and later expanded to the new University Hospital. Both parties will migrate roughly 70‑80 % of the medical center’s storage and compute workloads—including digital pathology, imaging and electronic health‑record backups—to Microsoft Azure, creating a more secure, resilient infrastructure. A unified data foundation built on Microsoft Fabric and OneLake will link clinical, operational and research data, while AI tools will assist clinicians and accelerate scientific discovery. The alliance also aims to broaden AI skill training and certification for students and Ohio communities.

💡 By embedding Azure‑based AI and data services directly into hospital operations, the partnership creates a replicable blueprint for next‑generation, technology‑driven patient care that can be scaled across health systems.

news.microsoft.com · Nov 10

IBM and Microsoft announce a new AI agent platform designed for industry-specific…

IBM and Microsoft unveiled Imagine Enterprise, an agentic AI platform aimed at accelerating industry‑specific transformation. The joint offering combines IBM Consulting’s library of more than 6,000 prebuilt AI agents and assets with Microsoft’s AI, cloud, security and GitHub tools. Designed for regulated sectors, the platform promises instant expertise, seamless integration with existing data and systems, and built‑in governance, observability and compliance controls. Forward‑deployed engineers from both firms will assist qualifying customers in moving from pilot to production. Key components include Microsoft Fabric, Azure, Entra, Purview, Defender and Copilot Studio, alongside IBM Consulting Advantage’s Process Studio and Context Studio. Early adopters such as SEI, a financial‑technology provider, are testing the solution to enhance employee and client experiences while supporting sustainable growth.

💡 Bundling ready‑made agents with enterprise‑grade security and governance lets regulated firms embed AI at scale, turning experimental projects into production‑ready capabilities.

windowslatest.com · Nov 10

Windows 11 still loses your Android phone after sleep, but Microsoft now…

Microsoft acknowledged persistent connectivity problems with Windows 11’s Phone Link, which often drops Android devices after the PC wakes from sleep. In a post on X, Windows chief Pavan Davuluri said the company is prioritizing reliability improvements for the feature, citing ongoing investment in faster reconnection. User complaints on the Feedback Hub, with thousands of upvotes, highlight issues such as lost photo access and missed notifications, often caused by Windows sleep states or Android battery‑saving measures. Microsoft’s response includes work from the “RemoteControlManager” team, which is testing new remote‑control capabilities that would let users lock, restart, shut down, or apply updates to a PC directly from an Android phone. The added strings in the Android APK suggest these functions are near rollout, aiming to tighten the PC‑phone integration.

💡 Enabling full remote power management from Android could turn a phone into a genuine on‑the‑go PC controller, reducing the need to physically access a dormant workstation.