CISA Warns of Actively Exploited Microsoft Outlook Zero-Day Vulnerability

CISA has added CVE-2026-124194, an actively exploited Microsoft Outlook spoofing vulnerability, to its Known Exploited Vulnerabilities catalog.