A Critical Outlook vulnerability removes the click from a familiar phishing scenario. Microsoft says a specially crafted email can trigger code execution when it appears in the Reading Pane, forcing businesses to rethink both patch priority and the protection promised by user awareness.