Sangfor Security Researchers Invited to Present Findings at DEFCON 2021

HONG KONG,July 26,2021 -- Sangfor Technologies is proud to announce their presentation – Don't Dare to Exploit - An Attack Surface Tour of SharePoint Server – at DEFCON 29 in Las Vegas on August 7,2021,outlining several previously unknown SharePoint attack surfaces,mitigations to these attack surfaces,and how these mitigations can be bypassed. The exploits will be demonstrated during the 45-minute presentation.

The presentation,by Sangfor BlueOps members Yuhao Weng and Zhiniang Peng,with security researcher Steven Seeley,selectedfromthousandssubmittedto DEFCON,will explain the security architecture of Microsoft SharePoint's server and how it differs from other popular Content Management System (CMS) products. From an offensive perspective,it will reveal several attack surfaces,mitigations implemented against them,and how those mitigations can be bypassed. Several high impact vulnerabilities (including CVE-2021-24072,CVE-2020-17120,and CVE-2020-17017) will be discussed detailing their discovery and exploitation.

SharePoint is the most well-known CMS used to share and manage content within organizations simplifying team collaboration. Zero-day vulnerabilities are exploited by cyber attackers to gain administrative access to networks for data theft or further infiltration and infection of the network.

DEFCON is the largest gathering of hackers from around the world, held annually inLas Vegas,Nevada,and is attended by the world's top security professionals,journalists,researchers,students,law enforcement – and yes,hackers.

SangforBlueOpsTeam

SangforBlueOps,Sangfor's highly skilleddefensivesecurity testingor blueteam,workstoimproveattack detection anddefensestrategies for all Sangfor'ssecurity solutions. Experienced securityteams are the rock-stars of the cyber security world,keeping up with a constant flow of newcyber threats and vulnerabilities. Sangfor's BlueOps team is responsible for ensuring enterprises have the tools they need to respond effectively,identify threats quickly,and keep their software and users safe and productive.

About Sangfor Technologies

Sangfor is a leading global vendor of IT infrastructure and security solutions specializing in Cyber Security and Cloud Computing.

For more information on Sangfor's presentation,or on Sangfor's suite of security solutions such asNGFW&NDR,visit ourwebsiteor social media pages.

Enjoy FREE use of the VMware ESXi version of Sangfor'sNext Generation Application Firewall withfreeVirtual Public NetworkandEndpoint Secureendpoint protection,the total solution for a secure networkwith remote workers.Apply now.

Media Contact

Sunny Sun

marketing@sangfor.com

+86 755-8656 0605