Microsoft's massive Patch Tuesday: It's raining bugs

Microsoft's April Patch Tuesday included 165 CVEs; the write-up highlights CVE-2026-32201, an improper input validation/spoofing vulnerability in SharePoint that Microsoft says is under active exploitation and can be used for phishing and unauthorized data manipulation, and CVE-2026-33825, an elevation-of-privilege issue in Defender that matches public exploit code dubbed "BlueHammer." The article notes limited disclosure details, debate over researcher interactions with Microsoft, and urges rapid testing and deployment of fixes.