tech π¨ Hackers are hitting poorly set up Power Pages sites
A new report revealed that hackers were stealing sensitive information from Microsoft Power Pages websites due to improper security configurations. The data-extortion group ExfilSquad targeted publicly accessible portals that allowed anonymous users too much access to Microsoft Dataverse records. This attack method involves exploiting incorrect settings rather than breaking software protections, compromising records like emails and phone numbers. These sites, built with Power Pages, are used to share business data with the public and partners. Organizations must urgently check their security settings to prevent similar data exposure incidents. π