Microsoft Copilot for SharePoint just made recon a whole lot easier. 🚨
Â
One of our Red Teamers came across a massive SharePoint, too much to explore manually. So, with some careful prompting, they asked Copilot to do the heavy lifting...
Â
It opened the door to credentials, internal docs, and more.
Â
All without triggering access logs or alerts.
Â
Copilot is being rolled out across Microsoft 365 environments, often without teams realising Default Agents are already active.
Â
That’s a problem.
Â
Jack, our Head of Red Team, breaks it down in our latest blog post, including what you can do to prevent it from happening in your environment.
Â
📌Read it here: https://www.pentestpartners.com/security-blog/exploiting-copilot-ai-for-sharepoint/