COGNOSCERE Business Climate Report — Issue C112 · July 18, 2026

COGNOSCERE INTELLIGENCE · BUSINESS CLIMATE REPORT

Saturday, July 18, 2026

■ THE INTEL

THE INTEL. CISA has issued an urgent directive calling for immediate hardening of on-premises SharePoint environments, citing mounting real-world exploitation of known vulnerabilities. This is not theoretical — attackers are actively leveraging these flaws to gain initial access, move laterally, and exfiltrate data. For defense-SMBs operating in controlled unclassified information environments or pursuing CMMC certification, an unpatched SharePoint instance is a compliance liability and an operational risk. For commercial-SMBs, it is a direct threat to business continuity and customer data. The agency’s guidance is clear: patch immediately and audit your configurations against their published hardening benchmarks.

Sources: CISA

■ THE RECORD

THE RECORD. Within the next ninety days, at least one major managed-service provider or cloud-hosting vendor will announce a forced migration or mandatory patching policy for SharePoint on-premises instances, affecting tens of thousands of SMB tenants, by October sixteen, 2026. This resolves if a top-twenty MSP or hosting provider such as Rackspace, GoDaddy, or Intermedia publicly announces a mandatory SharePoint on-premises patch-or-migrate deadline, verifiable via press release or customer notification.

■ THE READ

THE READ. Inventory every on-premises SharePoint instance in your environment this week, apply all CISA-referenced patches immediately, and open an evaluation of migration to SharePoint Online before your hosting provider forces the decision for you.

■ THE PROJECTION

Within the next 90 days, at least one major managed-service provider or cloud-hosting vendor will announce a forced migration or mandatory patching policy for SharePoint on-premises instances, affecting tens of thousands of SMB tenants.

■ DECISION CUES