The Microsoft Power Apps portal was found to be exposing sensitive personal data collected during the COVID-19 epidemic due to misconfigurations. The exposed data included job applicant social security numbers and employee IDs, COVID-19 contact tracing and vaccination data, and millions of names and email addresses. The data leaks were discovered by the UpGuard Research Team, which notified 47 public and private institutions, including governmental bodies in Indiana, Maryland, New York City, Microsoft, American Airlines, and J.B. Hunt. The total number of leaked records across all portals amounted to 38 million.

Hackers Exploiting Cisco ASA Zero-Day to Deploy RayInitiator and LINE VIPER Malware
Cybersecurity authorities are urging organizations to take immediate action following the discovery of a sophisticated espionage campaign targeting Cisco Adaptive Security Appliance (ASA) firewalls. In