🧰 SharePoint

The items that name it 14

• [tl;dr sec] #350 - Reverse Engineer Anything, Tracking AI-integrated Malware, Test-driving Jev
  articleas affected products2026-10-15
• ZDI: The October 2026 Security Update Review
  advisoryas classification.technologies2026-10-13
• Insights into Suspected DPRK Workers
  writeupas classification.technologies2026-08-26
• UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud Environments
  articleas affected products2026-08-06
• Claude as Autonomous Bug Bounty Hunter
  articleas affected products2026-07-30
• Cybercrime Breaches Klue: Salesforce Data Impacted for Many Victims, including Huntress
  writeupas affected products2026-06-18
• Inside Kali365, a Device Code Phishing Ecosystem | Huntress
  writeupas affected products2026-06-11

  Accessed via OctoLink Live using stolen tokens/cookies

• elementalsouls/Claude-BugHunter
  repoas affected products2026-05-22It is written here as SharePoint (on-prem).

  targeted by hunt-sharepoint skill, including ToolShell and legacy SOAP attack paths

• OpenClaw, Rogue Agents, and Application Hygiene
  writeupas affected products2026-04-01

  Affected via Sites.FullControl.All permission granting full control over all SharePoint sites, including permission management and content access.

• Threat Actors Abuse Railway.com PaaS as Microsoft 365 Token Attack Infrastructure
  writeupas affected products2026-03-23

  Impersonated via branded landing pages in phishing lures; also referenced for compliant-device mitigation

• A Threat Actor Abuses Another Free Trial
  writeupas classification.technologies2026-03-06
• Velociraptor Misuse, Pt. II: The Eye of the Storm
  writeupas classification.technologies2025-12-03
• Velociraptor WSUS Exploitation, Pt. I: WSUS-Up?
  writeupas affected products2025-11-20

  Vulnerable to ToolShell vulnerabilities, cited as the likely initial access vector in the Storm-2603-linked incident documented by Cisco Talos

• Sift — Open-Source Secrets/Credential Scanner
  repoas affected products

  scanned by Sift for secrets; also backs OneDrive

In every workspace you can read 16