There's a Second, Worse Semantic Kernel CVE, and It's Part of a Pattern

I wrote about CVE-2026-25592, the CVSS 10 prompt injection bug in Microsoft's Semantic Kernel that let a malicious prompt reach code execution. At the time I treated it as a single, severe, but isolat