{"schema":"sb.node.v1","id":"sb:e/9233394f253e88a08e732f3f","kind":"entity","label":{"text":"sharepoint","locale":"en"},"identity":{"anchor":"label:en:sharepoint","strength":"label"},"asOf":{"knowledgeCutoff":"2026-10-08T21:52:38.794589+00:00","snapshot":"deploy 42fcb912508e16b96962a1bf0a5ae2df232e259a"},"lens":{"kind":"public"},"build":{"plane":"projected","builtFrom":["entity_graph.slim.json","entity_receipts (deploy asset)","event_graph.json","truth_records (deploy asset)","corroborated_record.json"],"rule":"node-projection.entity@v1"},"standing":{"evidence":{"supporting":300,"separatePublishers":14,"basis":"documents that mention the subject and the outlets that carried them; a mention is evidence the referent is in use, not evidence about any claim"},"admission":{"state":"canonical","reason":"entity graph provenance 'curated'; the node carries no promotion receipt in v1","policy":"EQ-PROMOTION (receipt not carried)"},"disposition":{"state":"served","reason":"public record"},"validity":{"from":"2026-07-17","to":"2026-10-08","basis":"first and last day we saw it mentioned; not the subject's own lifetime"},"measurement":{"state":"partial","blind":["assertion coverage 0.183: about 82% of mentions carry no typed assertion"]}},"dimensions":{"domains":["auto","cloud_computing"],"activeDays":31,"assertions":{}},"up":[],"upNote":"An entity is a root: it is contained by nothing. Pan out by following R.","children":{"count":7,"byKind":{"observation":7},"withheld":{"state":"withheld","count":5,"reason":"5 receipts withheld: no source link (the same rule the topic record applies)"},"items":[{"id":"sb:o/29ab86c0fa49e849fbb1d630","kind":"observation","label":"BleepingComputer · 2026-10-03 · Warlock ransomware breach SharePoint in water, telecom operator attacks","url":"https://www.bleepingcomputer.com/news/security/warlock-ransomware-breach-sharepoint-in-water-telecom-operator-attacks/"},{"id":"sb:o/53194d462b508771e356ccdf","kind":"observation","label":"The Register · 2026-09-29 · Microsoft sends PDFs to strange new worlds instead of SharePoint","url":"https://www.theregister.com/software/2026/09/29/microsoft-sends-pdfs-to-strange-new-worlds-instead-of-sharepoint/5299735"},{"id":"sb:o/38e2977c44cabf729178c645","kind":"observation","label":"SecurityWeek · 2026-09-27 · Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks","url":"https://www.securityweek.com/microsoft-sharepoint-flaw-cve-2026-65660-now-exploited-in-attacks/"},{"id":"sb:o/76bd3c8d012ab66b6f5ce015","kind":"observation","label":"The Hacker News · 2026-09-26 · SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild","url":"https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html"},{"id":"sb:o/2fdb1d1f9fb5abe7ea788986","kind":"observation","label":"BleepingComputer · 2026-09-26 · CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks","url":"https://www.bleepingcomputer.com/news/security/cisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks/"},{"id":"sb:o/72f65c3c2f073d68a6a57f25","kind":"observation","label":"The Hacker News · 2026-09-22 · SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE","url":"https://thehackernews.com/2026/09/sharepoint-flaw-initially-listed-as.html"},{"id":"sb:o/5a24d960a2b73802e8107957","kind":"observation","label":"The Register · 2026-10-08 · Singapore’s central bank wants all FinTech AI use cases subject to independent review","url":"https://www.theregister.com/ai-and-ml/2026/10/08/singapores-central-bank-wants-all-fintech-ai-use-cases-subject-to-independent-review/5301798"}],"cursor":null,"order":"newest first; we keep the 7 newest receipts for this entity. Its other observations are counted in standing.evidence.supporting but are not addressable in v1"},"relations":{"count":12,"byKind":{"claim":2,"co-mentioned":10},"items":[{"id":"sb:p/83ddabda46e4bbccaafd4ad6","kind":"claim","label":"Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware — corroborated","role":"named-in","relationKind":"claim","members":1},{"id":"sb:p/9a1d947897a42eeb822310b6","kind":"claim","label":"Warlock Ransomware Group Expands SharePoint Attacks on Critical Infrastructure Across Latin America and Iberia — corroborated","role":"named-in","relationKind":"claim","members":1},{"kind":"relation","label":"co-mentioned with microsoft (284 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/0b1ccdbd565ced017ab6a425"},{"kind":"relation","label":"co-mentioned with ai (278 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/248c0fed7bdfe14575cbca8f"},{"kind":"relation","label":"co-mentioned with china (267 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/876f03eda7ba96d01865208f"},{"kind":"relation","label":"co-mentioned with russia (262 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/20cbc0add1e094aa97505b47"},{"kind":"relation","label":"co-mentioned with black hat (261 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/a927a785ed742554402b205d"},{"kind":"relation","label":"co-mentioned with infosec (261 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/837a7b4252528f95fa6e504a"},{"kind":"relation","label":"co-mentioned with moss (261 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/ec8b713664e69656d991d5c2"},{"kind":"relation","label":"co-mentioned with prem (261 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/97e5c662ffd57ba9d4024f0e"}],"cursor":"c1.eyJpZCI6InNiOmUvOTIzMzM5NGYyNTNlODhhMDhlNzMyZjNmIiwibCI6InJlbGF0aW9ucyIsIm8iOjEwLCJrIjpudWxsLCJhIjoiMjAyNi0xMC0wOFQyMTo1MjozOC43OTQ1ODkrMDA6MDAifQ","order":"situations first, then claims (the subject's own maintained record, then site-wide corroborated clusters; each label ends with its standing), then co-mentions by shared documents, descending. Co-mentions are the ten strongest the entity graph keeps per entity"},"edge":{"state":"continues"},"links":{"rest":"/api/v1/node/e/9233394f253e88a08e732f3f","mcp":"traverse {\"id\":\"sb:e/9233394f253e88a08e732f3f\"}","page":"/entity/sharepoint/"},"limits":{"levelsPerCall":1,"pageSize":10,"maxPageSize":50,"membersMax":50,"statement":"One level per call: depth is 1 and only 1, and there is no whole-graph dump. pageSize 1-50 (default 10); a page limit is a cursor, never an edge. Members are listed up to 50. At most 60 traverse calls a minute per caller (runaway-loop protection, not a meter). One knowledge cutoff is served: the deploy's."},"actions":[{"verb":"unfold","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/9233394f253e88a08e732f3f\",\"level\":\"children\"}"},{"verb":"fold","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/9233394f253e88a08e732f3f\"}"},{"verb":"panOut","lit":false,"effect":"read","layer":"cantina","reason":"An entity is a root: it is contained by nothing. Pan out by following R."},{"verb":"follow","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/9233394f253e88a08e732f3f\",\"level\":\"relations\"}"},{"verb":"receipts","lit":false,"effect":"read","layer":"cantina","reason":"receipts are the observations below this node; unfold to reach them"},{"verb":"edge","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/9233394f253e88a08e732f3f\"}"},{"verb":"asOf","lit":false,"effect":"read","layer":"cantina","reason":"v1 serves one knowledge cutoff, this deploy's; walking an earlier cutoff needs retained history (EQ-REPLAY), which v1 does not keep"},{"verb":"switchObserver","lit":false,"effect":"read","layer":"cantina","reason":"the public record is the same for every observer; traversal through a Watch's lens is not served in v1"},{"verb":"readOriginal","lit":false,"effect":"read","layer":"cantina","reason":"no translation is applied on this node; every label is the source's own text"},{"verb":"save","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"saving applies to a configured Watch; configure one around this node first (free), then save it"},{"verb":"deliver","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"delivery applies to a saved Watch"},{"verb":"format","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"output format applies to a saved Watch"},{"verb":"deltaR","lit":false,"effect":"read","layer":"workshop","reason":"Delta R needs a saved Watch with a previous reading"},{"verb":"read","lit":false,"effect":"read","layer":"docking-bay","reason":"one-time Reads are parked until the Commander decides their shape (#938)"}]}