Jenko Hwong
where else to find them
no profile links on file
what they talk about
all 4 in the filters
where they keep going back
no series more than once — all 4 in the filters
on a stage with
- Chris Ryanonce
who talks about the same things
- Miro Horacek2 talks
- Aaron Parecki13 talks
- Alexander Weinert2 talks
- Graeme Foster4 talks
- Ben Dechrai29 talks
- Tom Tervoort3 talks
| title | conference | date |
|---|---|---|
| 📕 CloudShell Hide-n-Seek: enjoying the sweet persistent sounds of silence! 🔥 | BSidesSF 2026 | 2026-03-21 |
A multi‑cloud CTF shows an attacker chaining an SSRF to IMDS to dump temporary API creds, enumerate S3, then use those creds to fetch a federated console URL… | ||
| The Dark Underbelly of 3rd-Party Application Access to Corporate Data | RSA Conference 2023 | 2023-04-24 |
Analyzes millions of production OAuth approvals and finds 400+ unique apps on average, one enterprise with 12,330 apps in one org, and about 44% of apps… | ||
| Defending Against New Phishing Attacks that Abuse OAuth Authorization Flows | OWASP 2022 Global AppSec Europe Virtual Event | 2022-11-04 |
Shows concrete attacks: attackers register or reuse OAuth client IDs, send a Microsoft device‑code URL, and with 50 lines of code and social engineering obtain… | ||
| Defending Against New Phishing Attacks that Abuse OAuth Authorization Flows | RSAC 2022 | 2022-06-06 |
Presenter: Jenko Hwong, Cloud Security Researcher, Netskope
Users are prompted to login at the real Microsoft login page, real domain, real cert, and also… | ||
| nothing matches | ||