Credential Sharing As A Service: The Dark Side Of No Code
summary
Claims that enterprises accumulate 100,000 apps of local no‑code with thousands of reusable connections that are actually shared refresh tokens, demonstrates concrete attacks: ransom via drag‑and‑drop SharePoint encryption, mass exfiltration by auto‑creating drafts to personal Gmail, and an APT persisting for six months with scheduled automations and webhooks. Finds public portal misconfigs exposing 40 million records. Provides tooling like zacreds and a Power Platform “powerful” CLI that builds ephemeral automations to run and delete payloads.
AI-written summary · about
chapters (4)
related talks
54mCredential Sharing as a Service: The Dark Side of No Code
51mSure, Let Business Users Build Their Own. What Could Go Wrong?
49mAll You Need Is Guest
38mAll You Need is Guest
53mAbusing Cloud Apps 101: Command and Control
40mOne Drive, Double Agent: Clouded OneDrive Turns Sides
48mTwo Steps Forward for SaaS Adoption, One Step Back for Security
33mCloud Hacking Scenarios