Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
101010.pl is one of the many independent Mastodon servers you can use to participate in the fediverse.
101010.pl czyli najstarszy polski serwer Mastodon. Posiadamy wpisy do 2048 znaków.

Administered by:

Server stats:

516
active users

101010.pl: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.4.0-alpha.5

#sharepoint

3 posts3 participants0 posts today
Public
Paco Hope #resist

OMG. #Microsoft #Copilot bypasses #Sharepoint #security so you don’t have to!

“CoPilot gets privileged access to SharePoint so it can index documents, but unlike the regular search feature, it doesn’t know about or respect any of the access controls you might have set up. You can get CoPilot to just dump out the contents of sensitive documents that it can see, with the bonus feature* that your access won’t show up in audit logs.”

The S in CoPilot stands for Security!

pivotnine.com/the-crux/archive

The “all the things” meme where a scribbled cartoon character has a fist raised and their mouth open like shouting. It says “Backdoor all the things!”
Public *
Karl Voit :emacs: :orgmode:

Who says that #AI isn't helping people in real-life situations?

Consider yourself a bad #hacker, breaking in a company #SharePoint server. With #Microsoft #CoPilot, you're able to determine recent #pentesting reports, plain text #passwords and other crucial information for your attack right away. As if you get direct help by an insider. Amazing.

If you find an interesting sensitive file you don't have reading permission for, you can ask CoPilot to show it to you, overriding all the #security permission measures. Even better: this is not even logged as a file access. No need to clean up afterward.

Exactly the software you will need for your work. #Pentester and attackers could not have asked for a better tool. Your victims will pay for this handy service themselves. Great to get that kind of important support by Microsoft. 😉

Read about that on: pentestpartners.com/security-b

www.pentestpartners.comExploiting Copilot AI for SharePoint | Pen Test PartnersTL;DR AI Assistants are becoming far more common Copilot for SharePoint is Microsoft’s answer to generative AI assistance on SharePoint Attackers will look to exploit anything they can get their hands on Your current controls and logging may be insufficient Be careful what you keep on platforms like SharePoint Introduction SharePoint is a Microsoft platform
#LLM#fail#backdoor
Public
Pen Test Partners

Microsoft Copilot for SharePoint just made recon a whole lot easier. 🚨
 
One of our Red Teamers came across a massive SharePoint, too much to explore manually. So, with some careful prompting, they asked Copilot to do the heavy lifting...
 
It opened the door to credentials, internal docs, and more.
 
All without triggering access logs or alerts.
 
Copilot is being rolled out across Microsoft 365 environments, often without teams realising Default Agents are already active.
 
That’s a problem.
 
Jack, our Head of Red Team, breaks it down in our latest blog post, including what you can do to prevent it from happening in your environment.
 
📌Read it here: pentestpartners.com/security-b

#RedTeam#OffSec#AIsecurity
Public
Cryptomator

🚀 OUT NOW: Cryptomator for iOS 2.7.0! 🚀

We’re excited to introduce SharePoint integration in our latest iOS update! 🎉 This means you can now securely encrypt your files stored in Microsoft SharePoint and Teams with end-to-end encryption. 🔐

Upgrade to Cryptomator 2.7.0 today and take control of your data security!

🔗 Learn more: cryptomator.org/blog/2025/03/1

Green promotional graphic announcing the release of Cryptomator 2.7.0 for iOS. The text reads ‘OUT NOW – iOS UPDATE 2.7.0 – Cryptomator now works with SharePoint!’ The image features an illustrated robot with raised arms, celebrating the update, and the SharePoint logo glowing in the center.
#Cryptomator#Update#iOS
Public
Jan Penfrat

#Democracy Reporting International #DRI has a cool open position as #ITConsultant in #Berlin.

Unfortunately lots of #SharePoint and #Microsoft stuff but probably a good place to work nevertheless :)

democracy-reporting.jobs.perso

democracy-reporting.jobs.personio.deIT Coordinator / Inhouse IT-Consultant (m/f/d) | Jobs at Democracy Reporting InternationalOrganisation responsible for this vacancy: Democracy Reporting International gGmbH Elbestr. 28 / 29 12045 Berlin, Germany Data processing of personal data in third countries will not take place. We process your data in accordance with the provisions of § 26 German Federal Data Protection Act. More information about processing your personal data: privacy policy . Please note that a criminal background check will be required toward the final stages of the recruitment process, should we decide to proceed with an offer of employment. Democracy Reporting International (DRI) is an international, not-for-profit, non-governmental organization committed to political participation and democratic governance around the world. DRI headquarters (HQ) is located in Berlin; DRI has country offices in Tunisia, Lebanon, Democratic Republic of Congo and Ukraine, and works with local partners in a number of other countries. The working language is English.  
#FediHire#Fedijobs#JobAd
ExploreLive feeds
About