SharePoint's Yearly Shambles Again

Microsoft's SharePoint is currently inviting attackers in via a spoofing flaw because input validation is apparently a forgotten art. It is truly heartening to see such consistency.

Source: GovPing - Changeflow

The Full Story

Severity: Critical Mood: Expected

Another day, another SharePoint farm being harvested by attackers thanks to the usual CVE-2026-32201 nonsense. It seems any external-facing component is now basically a public invitation for remote code execution, affecting any organization optimistic enough to host their own servers. One might try to protect themselves by applying emergency patches at 3 AM, though assuming Microsoft's code will ever actually be secure is a bold choice. We all know the drill by now: patch, pray, and prepare for the next inevitable failure.

itproblems patchinghell

Open article →