Microsoft has published an advisory about a misconfiguration that led to its own, customer, and partner data being exposed. It has also called out security researchers for mishandling the disclosure.
Misconfiguration RSS
38 million records from multiple companies including Ford, J.B. Hunt, and American Airlines were left exposed to the public internet due to a default configuration in Microsoft Power Apps portals.