A Windows 11 Automation Tool Can Easily Be Hijacked
Hackers can use Microsoft’s Power Automate to push out ransomware and key loggers—if they get machine access first.
Michael Bargury
Security research, hacking, AppSec, primarily focused on low-code/no-code apps.
You May Also Enjoy
Safe Web Browsing for Copilots
1 minute read
Allowing a copilot to search the web at will is extremely dangerous. Here are two somewhat-understood vulnerabilities and how to mitigate them. Note: this is...
Followup links for All You Need Is Guest RSAC 2024
less than 1 minute read
Assorted links for All You Need Is Guest @ RSAC 2024:
Power Platform DLP Bypass via Copy-And-Paste
6 minute read
Last August I gave a talk at BlackHat USA titled All You Need Is Guest. In it, I showed how simple guest access to EntraID could be escalated into full contr...
All You Need Is Guest
7 minute read
This is a long overdue blog version of a talk I gave at BlackHat USA 2023 titled All You Need Is Guest. Slides and video recording are available as well.