Im aktuellen Podcast analysieren @sveckert und ich den Weg der Sharepoint-Sicherheitslücke vom Hacker:innen-Contest "Pwn2Own" in Berlin in die Hände des chinesischen Geheimdienstes (und wohl auch anderer staatlicher Spione). Und wir sprechen mit der wunderbaren Vera Bauer über ihre Erfahrungen als Tech-Youtuberin mit Konzernen, Männern und einer dreisten Firma, die ihr Gesicht und ihre Stimme geklaut hat.

https://frauen-technik.podigee.io/40-new-episode

#sharepoint #microsoft #cybersecurity #voicecloning #deepfake

Grave vulnerabilidad en Microsoft Sharepoint

Office 365 no solamente es un conjunto de herramientas horrible para trabajar, sino que también es inseguro 👇

https://arstechnica.com/security/2025/07/sharepoint-vulnerability-with-9-8-severity-rating-is-under-exploit-across-the-globe/

#infosec #vulnerability #cve_2025_53770 #microsoft #sharepoint #office365

Sharepoint! Spannende Geschichte, wie Microsoft es nicht geschafft hat, eine Sicherheitslücke richtig zu schließen, nachdem ein ethischer Hacker diese im Rahmen eines Wettbewerbs gefunden und gemeldet hatte.
https://www.zeit.de/digital/datenschutz/2025-07/sharepoint-sicherheitsluecke-hacker-microsoft-cyberangriff/komplettansicht
#sharepoint #microsoft #cybersecurity

Microsoft is rushing to stop hackers from wreaking havoc across the globe by exploiting a flaw in its SharePoint document management software. https://www.japantimes.co.jp/business/2025/07/22/tech/microsoft-hackers-global-havoc/?utm_medium=Social&utm_source=mastodon #business #tech #microsoft #hacking #internet #cybersecurity #privacy #sharepoint

Sharepoint is in the news again. It is never a good thing when Sharepoint is in the news.

#technology #security #microsoft #sharepoint

https://www.washingtonpost.com/technology/2025/07/20/microsoft-sharepoint-hack/

“Microsoft has released patches to “fully protect” SharePoint 2019 and SharePoint Subscription Edition servers, and the company is actively working on a patch for SharePoint 2016.

#CISA …says that the scope and impact of the attacks are still being assessed, and that any servers that have been impacted by the exploit should be disconnected from the internet until an official resolution is available.”

#Sharepoint #zerodayhttps://mastodon.social/@verge/114890559136880575

For our MSFT-aligned friends in particular,

Happy POST /_layouts/15/ToolPane.aspx?DisplayMode=Edit day to all who celebrate!

https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770 #sharepoint #bugs #msft #post #rce

OMG. #Microsoft#Copilot bypasses #Sharepoint #security so you don’t have to!

“CoPilot gets privileged access to SharePoint so it can index documents, but unlike the regular search feature, it doesn’t know about or respect any of the access controls you might have set up. You can get CoPilot to just dump out the contents of sensitive documents that it can see, with the bonus feature* that your access won’t show up in audit logs.”

The S in CoPilot stands for Security!

https://pivotnine.com/the-crux/archive/remembering-f00fs-of-old/

I left a MS SharePoint tab open and uBlock Origin tells me it's blocked 2,998 things (elements?) on the page so far. That number ticks up over time.

#SharePoint #Spyware #Surveillance #uBlockOrigin