Misconfigured access controls on NetSuite Custom Record Types (CRTs) within SuiteCommerce environments expose sensitive customer data, including PII, where attackers can exploit these misconfigurations to access public-facing sites and steal data.  Thousands of live SuiteCommerce instances are currently vulnerable due to improperly configured default websites or insufficient access control settings on CRTs.  Oracle has acknowledged … Continue reading Oracle NetSuite Flaw Exposes Sensitive Data to Hackers