A SharePoint bug patched in August was under active attack within a week of details going public. Why your patching window is now measured in days, not months.
