zero-click-exploit

Outlook NTLM hash leak zero-day (CVE-2023-23397)

A zero-click Outlook flaw let attackers steal NTLM hashes via crafted calendar reminders — exploited by APT28 for a year before patching. Here's what to do.