LinkedIn·Wednesday, 12 August 2026·14d ago
One of this week's 394 Microsoft fixes mentions us. CVE-2026-70324, elevation of privilege in SharePoint. The acknowledgement reads…
Curios
998 followers
One of this week's 394 Microsoft fixes mentions us.
CVE-2026-70324, elevation of privilege in SharePoint. The acknowledgement reads "Mateusz Gierblinski with Curios".
One bug out of 394. We will not pretend it changes the world. But it is the kind we spend our days on. Not how attackers get in: how a small foothold becomes the whole tenant.
A scan tells you which patch is missing. We test what someone could do. Penetration test, assessment, retest. https://lnkd.in/ejx3VdhY
If you run SharePoint Server: patch it and if you find bugs like this on your Tuesday evenings: we are hiring people to work alongside the engineer who found this one.
#OffensiveSecurity #CVE
↻ 2
View on LinkedIn Cross-referenced
Related on the wire
Before you sign the next penetration test, check who the scope was written for. If it was written to satisfy an audit, it will pass an…
"Are we secure?" Someone asks it near the end. Item seven, after the budget, ten minutes left. We used to answer it. A slide, three green…
GDPR. NIS2. DORA. CRA. The AI Act. Five years ago your security program answered to one regulator. Soon it answers to five. The frameworks…
Every vulnerability you've ever patched had a name before you met it. Someone gave it that name. This week, that someone was one of ours.…
The CCB inspection notice lands on a Tuesday morning. No drama. Just a date. You registered long ago. But registration was never the finish…