New SharePoint flaws help hackers evade detection when stealing files

April 9, 2024 at 11:37AM Researchers at Varonis have uncovered two techniques for attackers to evade SharePoint audit logs when downloading files. By using the “Open in App” feature or spoofing the User-Agent string, they can generate less severe or misleading events. Microsoft has acknowledged these issues but rated them as moderate, so organizations are … Read more