Critical RCE bug in Microsoft Outlook now exploited in attacks

CISA warned federal agencies to urgently patch a critical Microsoft Outlook RCE vulnerability (CVE-2024-21413, "Moniker Link") that allows attackers to bypass Protected View via malicious file:// links containing an exclamation mark, potentially enabling arbitrary code execution and NTLM credential theft; Microsoft patched the issue previously, but CISA added it to its KEV catalog and required rapid remediation.