2023: Rustla Tokens Of the Kingdom
Analysts investigate attack surfaces and defenses concerning 2023: Rustla Tokens Of the Kingdom.
Summary
Explains OAuth access and refresh tokens across Microsoft cloud services, token theft risks, and detection considerations for cloud identity abuse.
Related talks
BSides Canberra·50 min
Louis
Louis examines "JWAT.... Attacking JSON Web Tokens".
webjwatattacking+3
Insomni'hack·35 min
Mauro Eldritch
Mauro Eldritch analyzes MFT: Malicious Fungible Tokens.
malicioufungibletoken+2
Black Hat·39 min
Security researchers examine technical aspects of Detecting Access Token Manipulation.
manipulationdetectingacces+2