Uploaded May 2024 | Updated September 2026, 1 day ago

---

Varonis researchers discovered vulnerabilities in SharePoint that could allow attackers to download files without triggering any exfiltration alerts.

This sneaky attack uses simple technique to hide downloads as other activities, making it harder for defenders to detect exfiltrated files.

For more details, check out the blog "Sidestepping SharePoint security" here: varonis.com/blog/sidestepping-detection-while-exfiltrating-sharepoint-data