SharePoint Security Snafu -- Redmond Channel Partner

Barney's Blog

SharePoint Security Snafu

SharePoint Services 3.0 and Office SharePoint Server 2007 are both affected by an elevation of privileges flaw.

Similar to a recently announced IE 8 flaw, hackers use cross-site scripting to wage attacks. Here, malicious code is embedded into SharePoint-based Web pages. Similar to phishing scams, users are led to these sites through spam.

The lesson here? Don't just rely on patches, but train you end users to avoid clicking anything that is the least bit suspect.

Do you train your users in security? Does it work? Share your best advice with us by writing to [email protected].

Posted by Doug Barney on May 05, 2010

Featured

Ahead of AGI, Microsoft and OpenAI Redefine Their Partnership

In a recapitalization announced Tuesday, OpenAI has launched a new public benefit corporation (PBC) called OpenAI Group, giving Microsoft a 27 percent ownership stake valued at approximately $135 billion.
Veeam Acquires Securiti AI To Unify Data Resilience and AI Security

Veeam Software is making a strategic move into AI and data security by acquiring Securiti AI for $1.7 billion.
Microsoft Adds 'Mico' Virtual Assistant to Copilot in Major Fall Update

In a significant feature update, Microsoft on Thursday said it is reshaping its Copilot AI platform with features that deepen user personalization and enable real-time group collaboration, among other perks.
Nutanix Partner Central Rolls Out To Boost Channel Engagement

Nutanix on Wednesday launched a new platform, Partner Central, to give its channel partners a unified digital workspace for managing sales, tracking incentives and collaborating more effectively.