One of July’s exploited-in-the-wild zero-days is an AD FS elevation-of-privilege bug rated a modest 7.8 “Important.” Microsoft’s own responders found it during live attacks. If you still run on-prem AD FS, here is why the severity label undersells it – and your action list.