Pain in the Apps — Three Attack Scenarios Attackers Are Using to PWN SaaS
summary
Covers three real-world cloud attack scenarios showing how attackers exploit SaaS environments via API abuse, administrative account vectors, and user session compromise to gain access, move laterally, perform reconnaissance, and steal sensitive data from cloud applications.
AI-written summary · about
chapters (8)
- 0:00Introduction and SaaS risk
- 1:28SaaS threat overview
- 5:26Scenario one: SSO imposter
- 12:10Detection and prevention
- 17:54Scenario two: Dev tool attacks
- 26:40Salesforce exploitation
- 31:15Scenario three: Hybrid attacks
- 44:20Conclusion and Q&A
related talks
46mCritical SaaS, Critical Blind Spots: A Detection Engineer's Field Guide to SaaS Attacks
48mTwo Steps Forward for SaaS Adoption, One Step Back for Security
50mAPI Abuse through Mobile Apps: New Attacks, New Defenses
29mMapping the SaaS Attack Surface
25mHow Do They Get In?! Understanding the API Attack Vector
56mHack the Cloud Hack the Company: the Cloud Impact on Enterprise Security- 50mAPI Abuse through Mobile Apps: New Attacks, New Defenses
43mHacking the Cloud: Play-by-Play Attack on GitHub, Okta, and Salesforce