15 August 2026 - 07:34
Category: IT Fail
Leaving Portals Open Is Fine Actually
ExfilSquad verified extortion claims against fifteen organisations thanks to open Microsoft Power Page portals. Why do we even bother setting permissions?
Source: Cybersecurity Dive
The Full Story
Here we go again with Microsoft Power Page portals granting public read access to Dynamics 365 records like it is a public library. The U.K. Department for Education surrendered six hundred thousand records, whilst the City of Atlanta, Allstate, and Frontier Airlines joined the parade of approximately fifteen compromised targets. To survive this predictable misery, one might consider the radical concept of actually checking portal configurations.
#SameOldStory
#ITFailures