Microsoft’s CVE-2026-20928 entry is important less because of dramatic exploit details and more because of what the wording itself tells defenders: Microsoft is treating the issue as a real Windows Recovery Environment security feature bypass and using its confidence framework to signal how...