Azure Misconfiguration Leaks Microsoft Customer Data
msrc-blog.microsoft.com
msrc-blog.microsoft.com
I'll remember that for the next time someone tries to sell me on overpriced cloud services with the argument that Microsoft is better at protecting data than internal IT is. Maybe they are, but then again, they have a billion dollar bullseye painted on their back. Nobody is going to extend any comparable effort to break into a small local business.
Unfortunately, a lot of exploitations don’t need to pick a target first. Many exploitations can be executed by spraying shit on the wall and seeing what sticks.
Sometimes, that cloud service is also about who's to blame when stuff hits the fan. If my internal IT dept mis-configures something and data leaks, then they're the ones responsible. If my internal IT dept does everything "right" and Microsoft still screws up and data leaks, then Microsoft is the one with the problem.
Sadly, data is still leaked either way, but in the latter case, there's (hopefully) some sort of contract with a vendor.