New covert SharePoint data exfiltration techniques revealed

Varonis Threat Labs researchers have uncovered two techniques attackers can use can use for covert data and file exfiltration from companies’ SharePoint server. “These techniques can bypass the detection and enforcement policies of traditional tools, such as cloud access security brokers, data loss prevention, and SIEMs, by hiding downloads as less suspicious access and sync events,” they noted. The techniques, and why they may work Microsoft SharePoint is used by organizations to facilitate employee collaboration, … More →

The post …

access access security attackers brokers bypass can cloud cloud access companies covert data data exfiltration data loss data loss prevention data theft detection don't miss downloads enforcement enterprise exfiltration file hot stuff labs logging loss policies prevention researchers security server sharepoint techniques threat threat labs tools uncovered varonis