MICROSOFT FIXES 'PERFECT 10' EXPLOIT THAT COULD HAVE LET HACKERS RUN CODE REMOTELY

Summary from the TLDR InfoSec newsletter

Microsoft has fixed CVE-2026-69836, a critical deserialization vulnerability in Entra ID that enabled unauthenticated remote code execution without interaction, and confirmed there was no active exploitation before publicly disclosing the CVE for transparency.