Microsoft Said It Was Exploited. Then It Wasn’t. Your Tenant Still Can’t Tell You Which.
Verification asymmetry is what happens when the only party who can confirm whether your organization was compromised is the same party whose public account of the compromise changed within a single news cycle — and that is exactly what happened this week with Microsoft’s Entra ID. On Thursday, August 20, Microsoft disclosed CVE-2026-69836: a maximum-severity…