While not technically a security vulnerability, Microsoft has since addressed the configuration issue with Portal Checker updates and new configuration defaults
With buy-in already secured from existing associations and community organizations, a new Microsoft team will provide online tools, support, and guidance for local groups