Paolo Carner, MSc 's Linkedin Analytics

*Security Alert* Microsoft did it AGAIN! A new feature for Microsoft OneDrive, "Prompt to add a personal account to OneDrive Sync," is scheduled to be rolled out to business users *this month*. This update introduces a significant security vulnerability by enabling users to synchronize their OneDrive accounts and corporate accounts with a single click. Of course, this default setting bypasses established security protocols, as it lacks inherent controls, logging mechanisms, and corporate policies governing synchronizing personal accounts on business devices. Consequently, this creates a substantial risk of sensitive corporate data being unintentionally or maliciously transferred to personal, unmanaged environments. How to fix this: The primary method for mitigating this potential data leak is explicitly disabling the feature through the DisablePersonalSync Group Policy setting. Given the ease of data exfiltration and the potential for severe compliance and security breaches, it is very important that your IT team immediately verify the status of this policy within their organizations and take any necessary actions as your organization's risk appetite sees fit. #microsoft #onedrive #securityrisk