CISA has issued an urgent warning about a critical Microsoft Outlook vulnerability (CVE-2024-21413) that allows remote code execution through malicious email links. This flaw bypasses Outlook’s protections, potentially leading to credential theft and system compromise. CISA mandates federal agencies to secure systems by February 27, 2025, and recommends applying patches, disabling NTLM authentication, and educating users.

Healthcare organizations need to shake up email security practices
A study by Paubox has revealed that 43% of all healthcare email breaches come from Microsoft 365 due to security misconfigurations. The report found that