And yet, companies feel secure when they use Microsoft's online offerings such as 365.

I often work with clients in healthcare - they sometimes won't use anything except MS products, even when you can show them front-page news from that day showing it is full of vulnerability.

I think using Microsoft online today is the equivalent of "nobody got fired for buying IBM" back in the day. When MS has issues like this, people shrug and keep using them... other vendors would be wiped out.

Then again, Apple/Claris FileMaker had a huge server vulnerability for many many versions that basically opened the barn door in a similar manner (IIUC) and both the release & fix got almost no attention - zero comments here: https://news.ycombinator.com/item?id=41825851

It's almost like no one cares about security, really.