A pre‑authentication bug in SAML Web SSO, combined with weak access controls and cryptography, allows attackers to escalate privileges and achieve remote code execution.

New PoC shows how Microsoft Defender can be tricked into rewriting malicious files into protected locations, enabling ...