Michael Bargury
where else to find them
what they talk about
all 4 in the filters
where they keep going back
- RSA Conference2 editions2023–2024
all 6 in the filters
on a stage with
never shared a talk
who talks about the same things
- Mackenzie Jackson17 talks
- Dwayne McDaniel14 talks
- Niall Merrigan19 talks
- Olimpiu Pop8 talks
- Mahesh Chand13 talks
- Pedram Hayati5 talks
| title | conference | date |
|---|---|---|
| Living off Microsoft Copilot | OWASP Global AppSec San Francisco 2024 | 2024-09-23 |
Demonstrates a red-team–grade exploit chain: Copilot plugins can install a persistent backdoor into other users’ Copilot interactions, allowing data theft and… | ||
| Low-Code/No-Code Top 10 (LCNC) | Global AppSec Lisbon 2024 | 2024-06-24 |
Project claims a growing OWASP low‑code/no‑code Top 10 and says large vendors and enterprises already adopt it, citing over a million apps inside some… | ||
| All You Need Is Guest | RSA Conference 2024 | 2024-05-06 |
Claim: EntraID guest accounts let outsiders enumerate tenants, bypass DLP and extract credentials stored by Power Apps, yielding full SQL and blob dumps… | ||
| All You Need is Guest | Black Hat USA 2023 | 2023-08-05 |
Azure AD guest accounts can abuse Power Platform connections that business users share org‑wide to harvest credentials and call API Management proxies… | ||
| Sure, Let Business Users Build Their Own. What Could Go Wrong? | Black Hat USA 2023 | 2023-08-05 |
Slides and demos reproduce a Power Platform HR onboarding app that stores SSNs in a shared Dataverse table and shows automation logs store PII, proving the app… | ||
| Credential Sharing as a Service: The Dark Side of No Code | RSA Conference 2023 | 2023-04-24 |
Demonstrates how low‑code platforms collect OAuth refresh tokens into reusable connections that users can share, effectively becoming a credential sharing as a… | ||
| Windows 11 At Your Service | BSidesSF 2023 | 2023-04-22 |
Claim: Windows 11’s built‑in Power Automate RPA can be turned into a persistent C2 and exfiltration channel. It uses Power Automate agents plus an outbound… | ||
| Sure, Let Business Users Build Their Own. What Could Go Wrong? | BSidesSF 2023 | 2023-04-22 |
Scans of over 100,000 local low‑code apps reveal enterprises with 65,000 applications created in a few years and Microsoft reporting about 7–8 million low‑code… | ||
| Credential Sharing As A Service: The Dark Side Of No Code | Global AppSec Dublin 2023 | 2023-02-15 |
Claims that enterprises accumulate 100,000 apps of local no‑code with thousands of reusable connections that are actually shared refresh tokens, demonstrates… | ||
| nothing matches | ||