A Proof-of-Concept (PoC) devised by Proofpoint researchers demonstrates that ransomware actors can abuse the document versioning settings in OneDrive and SharePoint Online services to encrypt files. More https://www.proofpoint.com/us/blog/cloud-security/proofpoint-discovers-potentially-dangerous-microsoft-office-365-functionality
