Allowing a copilot to search the web at will is extremely dangerous.
Here are two somewhat-understood vulnerabilities and how to mitigate them.
Note: this is...
Last August I gave a talk at BlackHat USA titled All You Need Is Guest.
In it, I showed how simple guest access to EntraID could be escalated into full contr...
This is a long overdue blog version of a talk I gave at BlackHat USA 2023 titled All You Need Is Guest. Slides and video recording are available as well.