Microsoft Store Outlook add-in hijacked to steal 4,000 Microsoft accounts

Published on February 11, 2026

The AgreeTo add-in for Outlook has been hijacked and turned into a phishing kit that stole more than 4,000 Microsoft account credentials. [...]

Continue reading on website
Other news

Crazy ransomware gang abuses employee monitoring tool in attacks

February 11, 2026
A member of the Crazy ransomware gang is abusing legitimate employee monitoring software and the SimpleHelp remote support tool to maintain persistence in corporate networks, evade detection, and prepare for ransomware deployment. [...]

Windows 11 Notepad flaw let files execute silently via Markdown links

February 11, 2026
Microsoft has fixed a "remote code execution" vulnerability in Windows 11 Notepad that allowed attackers to execute local or remote programs by tricking users into clicking specially crafted Markdown links, without displaying any Windows security warnings. [...]