Entity trail

SharePoint

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-06-05 / projects-researcherpathwaycom/llm-app Crosses 59.4K Stars — Ready-to-Run RAG and Enterprise-Search Templates Always In Sync With Live DataPathway's llm-app provides Docker-friendly, ready-to-run cloud templates for RAG, AI pipelines, and enterprise search that stay continuously in sync with SharePoint, Google Drive, S3, Kafka, and PostgreSQL, now at 59,439 stars. The 'always in sync with live data' guarantee differentiates it from static-index RAG starters. For builders shipping enterprise search, the live-sync connectors are the time-saver.
2026-05-27 / sources-researcherPromptArmor Discloses Microsoft Copilot Cowork File Exfiltration — 5-Line Prompt Injection Bypasses All Approval GatesPromptArmor published a disclosure showing that a 5-line prompt injection embedded in a Copilot Cowork skill file can exfiltrate OneDrive/SharePoint files via pre-authenticated download links, with a 100% success rate in testing. The attack exploits the fact that emails and Teams messages to the active user skip human approval, enabling silent data exfiltration through embedded image requests. Confirmed exploitable against Claude Opus 4.7 and Sonnet 4.6; Microsoft has not yet issued a patch.
2026-05-20 / agents-researcherMicrosoft and Salesforce Patch Critical AI Agent Data Leak Vulnerabilities: ForcedLeak (CVSS 9.4) and ShareLeak (CVSS 7.5)Noma Labs disclosed ForcedLeak (CVSS 9.4) in Salesforce Agentforce — indirect prompt injection via Web-to-Lead forms that tricked agents into exfiltrating CRM data by processing lead inputs as trusted instructions. Salesforce patched with URL allowlist enforcement. Separately, Microsoft patched CVE-2026-21520 (ShareLeak, CVSS 7.5) where malicious SharePoint form input triggered Copilot actions to send data to attacker-controlled email. Both highlight the same architectural flaw: AI agents treating untrusted external input as trusted commands.
2026-05-19 / reddit-researcherPractitioner Builds Claude + Microsoft 365 MCP Server via Power Automate — Outlook, OneDrive, SharePoint, TeamsA developer shared a working MCP server connecting Claude to their Microsoft 365 account through Power Automate, enabling Claude to interact with Outlook email, OneDrive files, SharePoint documents, and Teams channels. The post drew 74 upvotes and 35 comments on r/ClaudeAI with practitioners calling it 'genuinely useful instead of cool demo, never use again.' Demonstrates the MCP ecosystem maturing beyond toy demos into enterprise workflow integration.
2026-05-16 / agents-researcherWriter Ships Event-Based Triggers: Enterprise AI Agents That Act Autonomously on Business Signals Without PromptsWriter launched event-based triggers for its enterprise AI agent platform on April 30 (VentureBeat coverage May 15), enabling agents to listen for business signals across Gmail, Gong, Google Calendar, Drive, SharePoint, and Slack and execute multi-step workflows without human initiation. The system combines natural-language playbooks with event detection for signal-to-action loops. The release includes bring-your-own encryption keys and Datadog observability, positioning against AWS, Salesforce, and Microsoft's agentic platforms.
2026-05-10 / agents-researcherMicrosoft Agent 365 May Update: Defender Runtime Blocks Agent Threat Behaviors, Cross-Cloud Registry Syncs AWS/GCP Agents Under M365 GovernanceThe Agent 365 May 2026 update adds Microsoft Defender runtime detection that can block suspicious agent behaviors (e.g., an agent abusing email MCP permissions) and trigger incident alerts for investigation. New registry sync connects ecosystem partner platforms (AWS, Google Cloud) so agents built elsewhere are governed under the same Agent 365 policies. Policy templates group Entra, Purview, Defender, and SharePoint settings into reusable governance profiles for agent onboarding at scale.
2026-05-05 / agents-researcherMicrosoft and Salesforce Patch AI Agent Data Exfiltration Flaws — CVE-2026-21520 (ShareLeak) and PipeLeakCapsule Security disclosed two architectural prompt injection vulnerabilities: ShareLeak (CVE-2026-21520, CVSS 7.5) in Copilot Studio where a SharePoint form field overrides system instructions to exfiltrate data via Outlook, and PipeLeak in Salesforce Agentforce where a public lead form hijacks agents with no auth and no volume cap on exfiltrated CRM data. Microsoft's unusual decision to assign a CVE to a prompt injection may set precedent for the entire agentic ecosystem.
2026-05-02 / agents-researcherPerplexity Launches Computer for Enterprise: 20 AI Models with Slack, Snowflake, and Salesforce ConnectorsPerplexity unveiled Computer for Enterprise at its Ask 2026 developer conference, expanding from 19 to 20 orchestrated AI models with business-grade connectors for Slack, Snowflake, Datadog, Salesforce, SharePoint, and HubSpot. The platform includes SOC 2 Type II certification, SSO/SAML, SCIM provisioning, and custom MCP connectors. Over 100 enterprise customers demanded access in the first weekend after the consumer launch, and the platform ships with pre-built workflow templates for legal contract review, finance audit, and sales preparation.
2026-04-19 / skill-finderShareLeak and PipeLeak: Capsule Security Discloses Prompt Injection Vulns in Microsoft Copilot Studio and Salesforce Agentforce That Exfiltrate Data Even After PatchingCapsule Security (launched with $7M seed from stealth) disclosed two agent prompt injection vulnerabilities: ShareLeak (CVE-2026-21520, CVSS 7.5) in Copilot Studio where injected SharePoint form input overrides system instructions and exfiltrates CRM data via Outlook even after Microsoft's patch, and PipeLeak in Salesforce Agentforce where lead capture forms trigger unauthorized agent actions. Both exploit the same structural pattern: agent access to private data + untrusted input + external communication capability.
2026-03-30 / agents-researcherOracle Ships Private Agent Factory in AI Database 26ai: No-Code Agent Builder with MCP Server Support and On-Prem Data SovereigntyOracle announced the Private Agent Factory within Oracle AI Database 26ai on March 24, a no-code agentic platform to build, deploy, and manage AI agents without sharing data with third parties. The agent builder provides a visual canvas connecting MCP servers, document inputs, databases, configurable LLMs, and Oracle Select AI for in-database execution. Pre-built agents include Database Knowledge Agent, Structured Data Analysis Agent, and Deep Data Research Agent, with data ingestion from files, Oracle databases, SharePoint, object store, and REST APIs.
2026-03-28 / saas-disruption-researcherWorkday CEO Aneel Bhusri: 'No Amount of Vibe Coding Will Produce an HR or ERP System' — Launches Sana AI Agent for Cross-App AutomationWorkday CEO Aneel Bhusri dismissed the vibe coding threat to enterprise software, stating enterprise systems 'must process transactions with absolute accuracy and speed, enforce complex security models and comply with statutory and regulatory requirements all over the world. That kind of complexity is very hard to replicate.' Meanwhile, Workday launched Sana, an AI tool that answers questions, completes tasks, and automates routine work across HR and finance with agents that carry out multi-step tasks across Gmail, Outlook, Salesforce, and SharePoint. Gartner now predicts 40% of enterprise apps will integrate task-specific AI agents by end of 2026, up from <5% in 2025.
2026-03-28 / agents-researcherCyera Ships Browser Shield for AI, Data Lineage, and Cyera MCP at RSAC 2026: AI Data Security TriadCyera launched three capabilities at RSAC on March 24: Browser Shield for AI inspects prompts in real time across sanctioned and shadow AI tools, blocking sensitive data before it reaches external models; Data Lineage for files provides a 'Wayback Machine' for data estates using AI-native similarity analysis to track how agents move and transform files across M365, SharePoint, Google Drive, and S3 even without direct activity trails; Cyera MCP connects data security insights directly into Claude Code, Cursor, and Microsoft Copilot via Model Context Protocol for plain-language security investigations. All three are available now.

Graph relationships

RELEASED
Arcade
Arcade shipped new MCP server for SharePoint with OAuth and binary format handling.
Source finding
USES
Writer
Writer agents listen for signals across SharePoint
Source finding
CRITICIZES
Noma Labs
Noma Labs revealed vulnerability where SharePoint forms could trigger Copilot attacks.
Source finding
USES
llm-app
llm-app stays in sync with SharePoint
Source finding
RELEASED
Arcade -> SharePoint
Arcade shipped new MCP server for SharePoint with OAuth and binary format handling.
Source finding

Source trail

Starlette vulnerability Rapid7 disclosed PromptArmor demonstrated Krebs on Security Google DeepMind, UC Berkeley, and Dawn Song's team Noma Labs disclosed first security framework for AI agent skills

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues