[dylan604]

So how does this work for someone to know what server to use the exploit? Do companies make their Sharepoint servers accessible to WWW? Do hackers need to use this on a network they've already pwnd? Finding out the FBI put something like this on a server open to the WWW would be classic. That much larger group just got a wee bit larger than they previously thought on their previously thought number.

[hulitu]

> Do companies make their Sharepoint servers accessible to WWW?

Microsoft was pushing companies to use its Azure cloud services. Now everything is in the cloud. And accessible to WWW.

[tripdout]

The post says it only applies to on-prem servers, not cloud ones like Microsoft 365.