Microsoft addressed 1,094 vulnerabilities in its November security update, with Windows and Office accounting for the majority of the fixes. Only one flaw, an Outlook spoofing bug, is currently under active attack and has been added to the CISA Known Exploited Vulnerability list. Security experts note that while fewer zero-days are being exploited, attackers are increasingly using AI to reverse patches rather than find new bugs. The release also includes a severe zero-click code execution bug in Windows Search reachable through Exchange Server.
Read the full story at cyberscoop.com.
