SharePoint Security Snafu
SharePoint Services 3.0 and Office SharePoint Server 2007 are both affected by an elevation of privileges flaw.
Similar to a recently announced IE 8 flaw, hackers use cross-site scripting to wage attacks. Here, malicious code is embedded into SharePoint-based Web pages. Similar to phishing scams, users are led to these sites through spam.
The lesson here? Don't just rely on patches, but train you end users to avoid clicking anything that is the least bit suspect.
Do you train your users in security? Does it work? Share your best advice with us by writing to dbarney@redmondmag.com.
Posted by Doug Barney on May 05, 2010 at 11:53 AM