unverified 28 Jul, 09:03 CISA deadline July 28 to patch actively exploited AD FS zero-day CVE-2026-56155 (token forgery / user impersonation) #substack Published on Substack