微软给用户吃“定心丸”:OneDrive 用户名枚举攻击风险有限,已限流遏制
Source IT之家2d ago
Summary
This item is a 中文-language original; headline and summary shown as published.
IT之家 10 月 31 日消息,就企业客户关注的 OneDrive URL 探测问题,微软公司回应表示:攻击者通过批量访问 OneDrive 或 SharePoint 链接 ,可能枚举出用户主体名称(UPN),进而用于精准网络钓鱼、撞库、暴力破解或社会工程攻击。 不过微软把这种“用户名枚举”归类为低风险侦察手段 ,…
We index headlines and summaries only. Full content and copyright remain with the original publisher — follow the source link to read it.
Open original- Desk
- Tech
- Region
- China
- Language
- 中文
- Item ID
- tech-3cce6e21
Comments 0 comments
No comments yet. Be the first.