SharePoint Security Snafu -- Redmond Channel Partner

Barney's Blog

SharePoint Security Snafu

SharePoint Services 3.0 and Office SharePoint Server 2007 are both affected by an elevation of privileges flaw.

Similar to a recently announced IE 8 flaw, hackers use cross-site scripting to wage attacks. Here, malicious code is embedded into SharePoint-based Web pages. Similar to phishing scams, users are led to these sites through spam.

The lesson here? Don't just rely on patches, but train you end users to avoid clicking anything that is the least bit suspect.

Do you train your users in security? Does it work? Share your best advice with us by writing to [email protected]

Posted by Doug Barney on May 05, 2010 at 11:53 AM

Free Webcast! Learn about Password Management Best Practices

Featured

Ivanti Plans Double Acquisition of Pulse Secure and MobileIron

In a bid to enhance its mobile endpoint security offerings, Ivanti announced on Monday "definitive agreements" to acquire MobileIron and Pulse Secure.
Microsoft's Enterprise Security Lineup Gets a 'Defender'-Centric Rebrand

Microsoft renamed many of its enterprise security solutions at Ignite last week to include the phrase "Microsoft Defender."
The 2020 Microsoft Product Roadmap

From the next major update to Windows 10 to the next generations of .NET and PowerShell, here's what's on tap from Microsoft this year.
2020 Microsoft Conference Calendar: For Partners, IT Pros and Developers

Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss. (Now updated with COVID-19-related event changes.)