Credential Sharing as a Service: The Hidden Risk of Low-Code/No-Code
Low-code/no-code platforms allow users to embed their existing user identities within an application, increasing the risk of credentials leakage.
Michael Bargury
Security research, hacking, AppSec, primarily focused on low-code/no-code apps.
You May Also Enjoy
Safe Web Browsing for Copilots
1 minute read
Allowing a copilot to search the web at will is extremely dangerous. Here are two somewhat-understood vulnerabilities and how to mitigate them. Note: this is...
Followup links for All You Need Is Guest RSAC 2024
less than 1 minute read
Assorted links for All You Need Is Guest @ RSAC 2024:
Power Platform DLP Bypass via Copy-And-Paste
6 minute read
Last August I gave a talk at BlackHat USA titled All You Need Is Guest. In it, I showed how simple guest access to EntraID could be escalated into full contr...
All You Need Is Guest
7 minute read
This is a long overdue blog version of a talk I gave at BlackHat USA 2023 titled All You Need Is Guest. Slides and video recording are available as well.