Microsoft Patch Tuesday fixes Outlook flaw already under attack

Source: Malwarebytes Labs

Read original source

At a glance

Microsoft’s November Patch Tuesday fixes more than 1,000 Microsoft vulnerabilities , including an Outlook flaw that attackers are already exploiting to steal authentication information. The release also fixes 48 critical remote code execution (RCE) vulnerabilities that could allow attackers to run code on affected machines, in some cases without user interaction. While Windows updates address many of this month’s vulnerabilities, readers should check for Office updates as well: the exploited Outlook flaw is patched through the affected Office products. To do this, follow these instructions: O…