38 million records exposed by misconfigured Microsoft Power