#powerpages — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #powerpages, aggregated by home.social.
-
Now we have an official Power Pages deprecation announcement for the wildcard value in Web API field configuration: https://learn.microsoft.com/en-us/power-pages/important-changes-deprecations#wildcard-value--in-web-api-field-configuration
September 14, 2026. That's the deadline for all Microsoft customers with portals to change their configs.
"Why is this change necessary?" Hmm... Let me guess: the ExfilSquad campaign?
-
Now we have an official Power Pages deprecation announcement for the wildcard value in Web API field configuration: https://learn.microsoft.com/en-us/power-pages/important-changes-deprecations#wildcard-value--in-web-api-field-configuration
September 14, 2026. That's the deadline for all Microsoft customers with portals to change their configs.
"Why is this change necessary?" Hmm... Let me guess: the ExfilSquad campaign?
-
Now we have an official Power Pages deprecation announcement for the wildcard value in Web API field configuration: https://learn.microsoft.com/en-us/power-pages/important-changes-deprecations#wildcard-value--in-web-api-field-configuration
September 14, 2026. That's the deadline for all Microsoft customers with portals to change their configs.
"Why is this change necessary?" Hmm... Let me guess: the ExfilSquad campaign?
-
Now we have an official Power Pages deprecation announcement for the wildcard value in Web API field configuration: https://learn.microsoft.com/en-us/power-pages/important-changes-deprecations#wildcard-value--in-web-api-field-configuration
September 14, 2026. That's the deadline for all Microsoft customers with portals to change their configs.
"Why is this change necessary?" Hmm... Let me guess: the ExfilSquad campaign?
-
Now we have an official Power Pages deprecation announcement for the wildcard value in Web API field configuration: https://learn.microsoft.com/en-us/power-pages/important-changes-deprecations#wildcard-value--in-web-api-field-configuration
September 14, 2026. That's the deadline for all Microsoft customers with portals to change their configs.
"Why is this change necessary?" Hmm... Let me guess: the ExfilSquad campaign?
-
Already 4.6 million leaked records in the confirmed Power Pages sites targeted by ExfilSquad. Now, Microsoft is rolling out a Web API hotfix to make misconfiguration less likely to expose entire customer databases on the public internet. Tracking the story in my newsletter:
https://www.perspectives.plus/p/stupid-easy-power-pages-data-leak
-
Already 4.6 million leaked records in the confirmed Power Pages sites targeted by ExfilSquad. Now, Microsoft is rolling out a Web API hotfix to make misconfiguration less likely to expose entire customer databases on the public internet. Tracking the story in my newsletter:
https://www.perspectives.plus/p/stupid-easy-power-pages-data-leak
-
Already 4.6 million leaked records in the confirmed Power Pages sites targeted by ExfilSquad. Now, Microsoft is rolling out a Web API hotfix to make misconfiguration less likely to expose entire customer databases on the public internet. Tracking the story in my newsletter:
https://www.perspectives.plus/p/stupid-easy-power-pages-data-leak
-
Already 4.6 million leaked records in the confirmed Power Pages sites targeted by ExfilSquad. Now, Microsoft is rolling out a Web API hotfix to make misconfiguration less likely to expose entire customer databases on the public internet. Tracking the story in my newsletter:
https://www.perspectives.plus/p/stupid-easy-power-pages-data-leak
-
Already 4.6 million leaked records in the confirmed Power Pages sites targeted by ExfilSquad. Now, Microsoft is rolling out a Web API hotfix to make misconfiguration less likely to expose entire customer databases on the public internet. Tracking the story in my newsletter:
https://www.perspectives.plus/p/stupid-easy-power-pages-data-leak
-
Microsoft is previewing a Power Pages security agent that could warn MS customers / partners about misconfigured settings for their websites:
I tried running the preview agent. Unfortunately, at least here in the EU, it refused to work. Yes, data movement across regions was already enabled. No, this shouldn't push the data outside EU data boundary, according to MS.
Anyone had luck with this in their M365 tenant?
-
Microsoft is previewing a Power Pages security agent that could warn MS customers / partners about misconfigured settings for their websites:
I tried running the preview agent. Unfortunately, at least here in the EU, it refused to work. Yes, data movement across regions was already enabled. No, this shouldn't push the data outside EU data boundary, according to MS.
Anyone had luck with this in their M365 tenant?
-
Microsoft is previewing a Power Pages security agent that could warn MS customers / partners about misconfigured settings for their websites:
I tried running the preview agent. Unfortunately, at least here in the EU, it refused to work. Yes, data movement across regions was already enabled. No, this shouldn't push the data outside EU data boundary, according to MS.
Anyone had luck with this in their M365 tenant?
-
Microsoft is previewing a Power Pages security agent that could warn MS customers / partners about misconfigured settings for their websites:
I tried running the preview agent. Unfortunately, at least here in the EU, it refused to work. Yes, data movement across regions was already enabled. No, this shouldn't push the data outside EU data boundary, according to MS.
Anyone had luck with this in their M365 tenant?
-
Microsoft is previewing a Power Pages security agent that could warn MS customers / partners about misconfigured settings for their websites:
I tried running the preview agent. Unfortunately, at least here in the EU, it refused to work. Yes, data movement across regions was already enabled. No, this shouldn't push the data outside EU data boundary, according to MS.
Anyone had luck with this in their M365 tenant?
-
15 real Power Pages websites got targeted literally because kids wanted to build up online reputation for their new group. No expectation for revenue via ransom payment - just fame.🤳
UK police, dept for education, Newcastle University, Bonava. 4/15 victims confirmed by now.
Exfiltrating real customer data by the millions, for the lulz. The story of ExfilSquad + incompetent portal development. (paywall)
https://www.thetimes.com/uk/crime/article/who-are-exfilsquad-hackers-cyberattacks-dtzhvvzgj
-
15 real Power Pages websites got targeted literally because kids wanted to build up online reputation for their new group. No expectation for revenue via ransom payment - just fame.🤳
UK police, dept for education, Newcastle University, Bonava. 4/15 victims confirmed by now.
Exfiltrating real customer data by the millions, for the lulz. The story of ExfilSquad + incompetent portal development. (paywall)
https://www.thetimes.com/uk/crime/article/who-are-exfilsquad-hackers-cyberattacks-dtzhvvzgj
-
15 real Power Pages websites got targeted literally because kids wanted to build up online reputation for their new group. No expectation for revenue via ransom payment - just fame.🤳
UK police, dept for education, Newcastle University, Bonava. 4/15 victims confirmed by now.
Exfiltrating real customer data by the millions, for the lulz. The story of ExfilSquad + incompetent portal development. (paywall)
https://www.thetimes.com/uk/crime/article/who-are-exfilsquad-hackers-cyberattacks-dtzhvvzgj
-
15 real Power Pages websites got targeted literally because kids wanted to build up online reputation for their new group. No expectation for revenue via ransom payment - just fame.🤳
UK police, dept for education, Newcastle University, Bonava. 4/15 victims confirmed by now.
Exfiltrating real customer data by the millions, for the lulz. The story of ExfilSquad + incompetent portal development. (paywall)
https://www.thetimes.com/uk/crime/article/who-are-exfilsquad-hackers-cyberattacks-dtzhvvzgj
-
15 real Power Pages websites got targeted literally because kids wanted to build up online reputation for their new group. No expectation for revenue via ransom payment - just fame.🤳
UK police, dept for education, Newcastle University, Bonava. 4/15 victims confirmed by now.
Exfiltrating real customer data by the millions, for the lulz. The story of ExfilSquad + incompetent portal development. (paywall)
https://www.thetimes.com/uk/crime/article/who-are-exfilsquad-hackers-cyberattacks-dtzhvvzgj
-
Misconfigured Power Pages websites were targeted in the data breach carried out by ExfilSquad. 15 victims, at least 3 confirmed, with the big whale still waiting for confirmation: Microsoft itself.
Why does this keep happening? The pattern is similar to 2021, the Web API is just a modern replacement to the OData feeds leaking the data earlier.
Gift link to my full article, since I learned so much about this from folks on Mastodon.👋
https://www.perspectives.plus/p/stop-leaking-dataverse-data-via-portals?gift_content=503cc0d4-98ed-4692-86b8-03f4d3a35e3d -
Misconfigured Power Pages websites were targeted in the data breach carried out by ExfilSquad. 15 victims, at least 3 confirmed, with the big whale still waiting for confirmation: Microsoft itself.
Why does this keep happening? The pattern is similar to 2021, the Web API is just a modern replacement to the OData feeds leaking the data earlier.
Gift link to my full article, since I learned so much about this from folks on Mastodon.👋
https://www.perspectives.plus/p/stop-leaking-dataverse-data-via-portals?gift_content=503cc0d4-98ed-4692-86b8-03f4d3a35e3d -
Misconfigured Power Pages websites were targeted in the data breach carried out by ExfilSquad. 15 victims, at least 3 confirmed, with the big whale still waiting for confirmation: Microsoft itself.
Why does this keep happening? The pattern is similar to 2021, the Web API is just a modern replacement to the OData feeds leaking the data earlier.
Gift link to my full article, since I learned so much about this from folks on Mastodon.👋
https://www.perspectives.plus/p/stop-leaking-dataverse-data-via-portals?gift_content=503cc0d4-98ed-4692-86b8-03f4d3a35e3d -
Misconfigured Power Pages websites were targeted in the data breach carried out by ExfilSquad. 15 victims, at least 3 confirmed, with the big whale still waiting for confirmation: Microsoft itself.
Why does this keep happening? The pattern is similar to 2021, the Web API is just a modern replacement to the OData feeds leaking the data earlier.
Gift link to my full article, since I learned so much about this from folks on Mastodon.👋
https://www.perspectives.plus/p/stop-leaking-dataverse-data-via-portals?gift_content=503cc0d4-98ed-4692-86b8-03f4d3a35e3d -
Misconfigured Power Pages websites were targeted in the data breach carried out by ExfilSquad. 15 victims, at least 3 confirmed, with the big whale still waiting for confirmation: Microsoft itself.
Why does this keep happening? The pattern is similar to 2021, the Web API is just a modern replacement to the OData feeds leaking the data earlier.
Gift link to my full article, since I learned so much about this from folks on Mastodon.👋
https://www.perspectives.plus/p/stop-leaking-dataverse-data-via-portals?gift_content=503cc0d4-98ed-4692-86b8-03f4d3a35e3d -
🟪 Creating a Power Page with Claude — Session 2
Demo of Claude Code in VS Code to scaffold a county 311 SPA prototype and iterate it quickly before Power Pages deployment. The agent runs commands you approve and serves a local dev preview. Make UI edits with natural language and screenshots add a use my location button and run an accessibility pass. Claude pro license required. 🚀
💡 Local SPA scaffold in VS Code
🔍 Rapid UI iteration via Claude prompts
⚖️ Accessibility pass and deploy ready prototype -
🟪 Creating a Power Page with Claude — Session 2
Demo of Claude Code in VS Code to scaffold a county 311 SPA prototype and iterate it quickly before Power Pages deployment. The agent runs commands you approve and serves a local dev preview. Make UI edits with natural language and screenshots add a use my location button and run an accessibility pass. Claude pro license required. 🚀
💡 Local SPA scaffold in VS Code
🔍 Rapid UI iteration via Claude prompts
⚖️ Accessibility pass and deploy ready prototype -
🟪 Creating a Power Page with Claude — Session 2
Demo of Claude Code in VS Code to scaffold a county 311 SPA prototype and iterate it quickly before Power Pages deployment. The agent runs commands you approve and serves a local dev preview. Make UI edits with natural language and screenshots add a use my location button and run an accessibility pass. Claude pro license required. 🚀
💡 Local SPA scaffold in VS Code
🔍 Rapid UI iteration via Claude prompts
⚖️ Accessibility pass and deploy ready prototype -
Power Pages "Anonymous" Access. Be careful. If you enable "Anonymous" on a table permission, you are exposing that data to the public internet. Always double-check your OData feeds and Liquid templates. One wrong permission = Data Breach.
-
Power Pages + Liquid. If you are building external facing sites, learn Liquid Template Language. The drag-and-drop editor is great for 80% of the site, but that last 20% of custom logic requires code. Liquid is the key to unlocking the portal.
-
Power Pages + Liquid. If you are building external facing sites, learn Liquid Template Language. The drag-and-drop editor is great for 80% of the site, but that last 20% of custom logic requires code. Liquid is the key to unlocking the portal.
-
Power Pages + Liquid. If you are building external facing sites, learn Liquid Template Language. The drag-and-drop editor is great for 80% of the site, but that last 20% of custom logic requires code. Liquid is the key to unlocking the portal.
-
Power Pages + Liquid. If you are building external facing sites, learn Liquid Template Language. The drag-and-drop editor is great for 80% of the site, but that last 20% of custom logic requires code. Liquid is the key to unlocking the portal.
-
Power Pages + Liquid. If you are building external facing sites, learn Liquid Template Language. The drag-and-drop editor is great for 80% of the site, but that last 20% of custom logic requires code. Liquid is the key to unlocking the portal.
-
Power Pages (formerly Portals) feels like the Wild West right now. 🤠
Bootstrap 5 support is great, but the Liquid styling curve is still steep for low-code users. If you know HTML/CSS/Liquid, you can charge a premium right now.
-
You can now check how much #Dataverse storage capacity different Power Platform and Dynamics 365 licenses give you, using this Dataverse Capacity Calculator I created:
https://www.youtube.com/watch?v=zMbbKDQRqd8
Direct link: https://dataverse.licensing.guide/
#PowerApps #PowerAutomate #PowerPages #CopilotStudio #Dynamics365
-
You can now check how much #Dataverse storage capacity different Power Platform and Dynamics 365 licenses give you, using this Dataverse Capacity Calculator I created:
https://www.youtube.com/watch?v=zMbbKDQRqd8
Direct link: https://dataverse.licensing.guide/
#PowerApps #PowerAutomate #PowerPages #CopilotStudio #Dynamics365
-
You can now check how much #Dataverse storage capacity different Power Platform and Dynamics 365 licenses give you, using this Dataverse Capacity Calculator I created:
https://www.youtube.com/watch?v=zMbbKDQRqd8
Direct link: https://dataverse.licensing.guide/
#PowerApps #PowerAutomate #PowerPages #CopilotStudio #Dynamics365
-
You can now check how much #Dataverse storage capacity different Power Platform and Dynamics 365 licenses give you, using this Dataverse Capacity Calculator I created:
https://www.youtube.com/watch?v=zMbbKDQRqd8
Direct link: https://dataverse.licensing.guide/
#PowerApps #PowerAutomate #PowerPages #CopilotStudio #Dynamics365
-
You can now check how much #Dataverse storage capacity different Power Platform and Dynamics 365 licenses give you, using this Dataverse Capacity Calculator I created:
https://www.youtube.com/watch?v=zMbbKDQRqd8
Direct link: https://dataverse.licensing.guide/
#PowerApps #PowerAutomate #PowerPages #CopilotStudio #Dynamics365
-
Power Apps are meant for you internal user audience. What can we do to expose Dataverse data to external users like customers?
#PowerPages isn't the only option that customers should explore. In fact, even portals/websites aren't alwaysthe best tool.
In my Perspectives on #PowerPlatform newsletter, I present both traditional and creative ways to allow external users to interact with data in your #Dataverse environment: https://www.perspectives.plus/p/external-access-to-power-platform-data
-
Power Apps are meant for you internal user audience. What can we do to expose Dataverse data to external users like customers?
#PowerPages isn't the only option that customers should explore. In fact, even portals/websites aren't alwaysthe best tool.
In my Perspectives on #PowerPlatform newsletter, I present both traditional and creative ways to allow external users to interact with data in your #Dataverse environment: https://www.perspectives.plus/p/external-access-to-power-platform-data
-
Power Apps are meant for you internal user audience. What can we do to expose Dataverse data to external users like customers?
#PowerPages isn't the only option that customers should explore. In fact, even portals/websites aren't alwaysthe best tool.
In my Perspectives on #PowerPlatform newsletter, I present both traditional and creative ways to allow external users to interact with data in your #Dataverse environment: https://www.perspectives.plus/p/external-access-to-power-platform-data
-
Power Apps are meant for you internal user audience. What can we do to expose Dataverse data to external users like customers?
#PowerPages isn't the only option that customers should explore. In fact, even portals/websites aren't alwaysthe best tool.
In my Perspectives on #PowerPlatform newsletter, I present both traditional and creative ways to allow external users to interact with data in your #Dataverse environment: https://www.perspectives.plus/p/external-access-to-power-platform-data
-
Power Apps are meant for you internal user audience. What can we do to expose Dataverse data to external users like customers?
#PowerPages isn't the only option that customers should explore. In fact, even portals/websites aren't alwaysthe best tool.
In my Perspectives on #PowerPlatform newsletter, I present both traditional and creative ways to allow external users to interact with data in your #Dataverse environment: https://www.perspectives.plus/p/external-access-to-power-platform-data
-
Microsoft Patches Exploited Power Pages Vulnerability – Source: www.securityweek.com https://ciso2ciso.com/microsoft-patches-exploited-power-pages-vulnerability-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #securityweek #PowerPages #Exploited #Microsoft #FEATURED
-
Microsoft Patches Exploited Power Pages Vulnerability – Source: www.securityweek.com https://ciso2ciso.com/microsoft-patches-exploited-power-pages-vulnerability-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #securityweek #PowerPages #Exploited #Microsoft #FEATURED
-
Microsoft Patches Exploited Power Pages Vulnerability – Source: www.securityweek.com https://ciso2ciso.com/microsoft-patches-exploited-power-pages-vulnerability-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #securityweek #PowerPages #Exploited #Microsoft #FEATURED
-
Microsoft Patches Exploited Power Pages Vulnerability – Source: www.securityweek.com https://ciso2ciso.com/microsoft-patches-exploited-power-pages-vulnerability-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #securityweek #PowerPages #Exploited #Microsoft #FEATURED
-
Microsoft Patches Exploited Power Pages Vulnerability https://www.securityweek.com/microsoft-patches-exploited-power-pages-vulnerability/ #Vulnerabilities #PowerPages #exploited #Microsoft #Featured
-
Microsoft Patches Exploited Power Pages Vulnerability https://www.securityweek.com/microsoft-patches-exploited-power-pages-vulnerability/ #Vulnerabilities #PowerPages #exploited #Microsoft #Featured
-
Microsoft Patches Exploited Power Pages Vulnerability https://www.securityweek.com/microsoft-patches-exploited-power-pages-vulnerability/ #Vulnerabilities #PowerPages #exploited #Microsoft #Featured
-
Microsoft Patches Exploited Power Pages Vulnerability https://www.securityweek.com/microsoft-patches-exploited-power-pages-vulnerability/ #Vulnerabilities #PowerPages #exploited #Microsoft #Featured
-
Microsoft Patches Exploited Power Pages Vulnerability https://www.securityweek.com/microsoft-patches-exploited-power-pages-vulnerability/ #Vulnerabilities #PowerPages #exploited #Microsoft #Featured
-
Microsoft Patches Exploited Power Pages Vulnerability https://www.securityweek.com/microsoft-patches-exploited-power-pages-vulnerability/ #Vulnerabilities #PowerPages #exploited #Microsoft #Featured
-
Microsoft Patches Exploited Power Pages Vulnerability https://www.securityweek.com/microsoft-patches-exploited-power-pages-vulnerability/ #Vulnerabilities #PowerPages #exploited #Microsoft #Featured
-
Microsoft Patches Exploited Power Pages Vulnerability https://www.securityweek.com/microsoft-patches-exploited-power-pages-vulnerability/ #Vulnerabilities #PowerPages #exploited #Microsoft #Featured
