Microsoft’s Patchwork Patchwork

This particular stroke of genius from Redmond managed to leave a zero-click authentication coercion vulnerability wide open for state-sponsored actors to enjoy. Despite their best efforts to mitigate remote code execution in February, the remaining flaw allows systems to chat with attacker servers without so much as a polite notification to the user. To shield ourselves from this inevitable mess, we’ll need to apply the actual fix once they've finished their homework. It's just another day of doing the same work twice.