ADFS stories
Defenders face added pressure as the update covers two actively exploited flaws and a SharePoint bug that could enable remote code execution.
Firms with manually rotated ADFS certificates could still be exposed, as attackers may recover live signing keys and forge SAML logins.
A critical flaw in Microsoft's ADFS allows bypassing MFA, posing a severe risk, warns Okta's REX team. Urgent patching is recommended for users.
