Flaw lets hackers pick Outlook locks

A widely used plug-in for Microsoft’s Outlook e-mail client that lets users encrypt and digitally sign messages has inadvertently weakened security and left the mail program open to attack