Two Microsoft SharePoint flaws have been observed that could potentially let attackers circumvent audit logs and avoid triggering downloads and then exfiltrate SharePoint data. The research was considered significant because of the vast base SharePoint has in government and business.

Source: SC Magazine