OneDrive

Reported Context (6)

Falcon Data Security for SaaS, now generally available, extends data security into SharePoint, OneDrive, and Copilot to help organizations discover sensitive data, understand risk, and automatically protect it. CrowdStrike Makes Falcon Data Security for SaaS Generally Available for Microsoft 365
The link ultimately led to a fake OneDrive AitM credential phishing page designed to gain access to the target’s cloud account. China-Aligned TA419 Uses Impersonation and AiTM Phishing to Target U.S. AI Policy Experts
use compromised identities to access and exfiltrate sensitive data from services including SharePoint, OneDrive, and Exchange. Threat Actors Target BYOD Users with Calls and Texts to Phish Microsoft 365 Credentials
After access is obtained, harvests email, Teams chats, OneDrive/SharePoint files, and Graph API data automatically. TeamFiltration Campaign Password-Sprays Forgotten Microsoft 365 Service Accounts in Chile
OneDrive: 1 Microsoft’s August Patch Tuesday fixes 421 vulnerabilities, including an actively exploited Windows flaw

CVE (51)

Malware (13)

People (7)

Threat Actors (12)

MITRE ATT&CK (16)

Vendors (32)

Products (54)

Tools (13)

Industries (8)

Countries (15)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.