Product
Microsoft Power Pages
- First Reported
- Aug 7, 2026
- Latest Reported
- Aug 14, 2026
Reported Context (3)
- Starknex reported a widespread default-configuration exposure in Microsoft Dataverse and Microsoft Power Pages that could allow unauthenticated or guest users to read sensitive records, including Microsoft Entra ID user Starknex Finds Dataverse and Power Pages Misconfigurations Could Expose Sensitive Data
- ExfilSquad allegedly targeted 2.6 million records, and researchers linked its activity to Microsoft Power Pages and possibly Microsoft Dynamics 365. Wesco Investigates CRM Incident After ExfilSquad Claims Data Theft
- The group's member also added that, in some cases, they targeted Microsoft Power Pages data tables, which were not properly protected. Resecurity Reports ExfilSquad Claims 13 Victims and Shares Data via Torrents
People (1)
Threat Actors (3)
MITRE ATT&CK (3)
Vendors (1)
Products (4)
Industries (5)
Countries (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.