Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
shakedown.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A community for live music fans with roots in the jam scene. Shakedown Social is run by a team of volunteers (led by @clifff and @sethadam1) and funded by donations.

Administered by:

Server stats:

255
active users

shakedown.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#sharepoint

0 posts0 participants0 posts today
Public
Pen Test Partners

Our Red Team found multiple ways to get around SharePoint’s “Restricted View” and exfiltrate data. Here's how...
 
Jack walks through Red Team methods using OCR and screenshots, Copilot, browser tricks, and HTML scraping to keep and collect data.
 
No matter the file type (TXT, PPTX, XLSX), there's a way...
 
📌Read here: pentestpartners.com/security-b
 
If you’re relying on “Restricted View” to protect sensitive data, it’s time to rethink.
 
#redteam #cybersecurity #infosec #sharepoint #microsoft365 #datasecurity #restrictedview #copilot

Public
Paco Hope #resist

OMG. #Microsoft #Copilot bypasses #Sharepoint #security so you don’t have to!

“CoPilot gets privileged access to SharePoint so it can index documents, but unlike the regular search feature, it doesn’t know about or respect any of the access controls you might have set up. You can get CoPilot to just dump out the contents of sensitive documents that it can see, with the bonus feature* that your access won’t show up in audit logs.”

The S in CoPilot stands for Security!

pivotnine.com/the-crux/archive

The “all the things” meme where a scribbled cartoon character has a fist raised and their mouth open like shouting. It says “Backdoor all the things!”
Public
Pen Test Partners

Microsoft Copilot for SharePoint just made recon a whole lot easier. 🚨
 
One of our Red Teamers came across a massive SharePoint, too much to explore manually. So, with some careful prompting, they asked Copilot to do the heavy lifting...
 
It opened the door to credentials, internal docs, and more.
 
All without triggering access logs or alerts.
 
Copilot is being rolled out across Microsoft 365 environments, often without teams realising Default Agents are already active.
 
That’s a problem.
 
Jack, our Head of Red Team, breaks it down in our latest blog post, including what you can do to prevent it from happening in your environment.
 
📌Read it here: pentestpartners.com/security-b

#RedTeam#OffSec#AIsecurity
Public
SP⟁CED GO⟁T

So, I'm finally, after all these years of being able to avoid it, having to dig in and try to build some SharePoint wiki pages.

Why is the default so ugly and seeming to lack typical margin in a lot of places? And am I searching for the wrong terms or is it really incredibly stupid what you have to do to customize the CSS for the pages? I really don't want to waste too much of my time learning SharePoint. This sucks.

#SharePoint#Curmudeoning
ExploreLive feeds
About