Patch Visibility Debt

Patch visibility debt is what accumulates when remediation priority depends on confirmation signals that arrive later than attacker activity does — and the SharePoint Server vulnerability cluster CISA has been updating since April is the clearest demonstration of it this year. On July 19, something began exploiting an unauthenticated SharePoint authentication-bypass flaw. On August 12,…