expose
-
Blog
Misconfigurations in Microsoft Power Pages could expose millions of sensitive records
A data exposure issue stemming from misconfigured access controls in Microsoft Power Pages has left several millions of records exposed to unauthorized users, new research reveals. Aaron Costello, chief of SaaS security and research at AppOmni, detailed how Microsoft’s website building platform could be granting anonymous users permissions to access sensitive PII. In September 2024, Costello said he uncovered “significant…
Read More » -
Blog
Hackers could dupe Slack’s AI features to expose private channel messages
Slack’s LLM-powered AI tool can be tricked into leaking sensitive data from private channels in a new prompt-engineering attack, according to security researchers. A report from LLM security specialists PromptArmor details a potential pathway for cyber criminals to use indirect prompt injection techniques to manipulate Slack AI to disclose data from channels they are not a part of. Slack AI…
Read More »