When “Secure by Design” Isn’t Enough: A Blind Spot in Power Platform Security Access Controls
Ziv Hagbi

When “Secure by Design” Isn’t Enough: A Blind Spot in Power Platform Security Access Controls

Security Groups play a pivotal role in tenant governance across platforms like Entra, Power Platform, and SharePoint....

Research
Validating the Mission: Zenity Labs Research Cited in Gartner’s AI Platform Analysis
Cinthia Portugal

Validating the Mission: Zenity Labs Research Cited in Gartner’s AI Platform Analysis

Research is what turns cybersecurity from a reactive scramble into a proactive discipline. It’s how security teams...

Research
How Copilot Studio Agents Can Slip Past Power Platform’s Firewall
Ziv Hagbi

How Copilot Studio Agents Can Slip Past Power Platform’s Firewall

Microsoft’s Power Platform recently introduced an IP-based Firewall feature designed to restrict access to environments...

Research
The Future of Enterprise AI Agents Demands Trust: Zenity Included in Forrester's "The AI Governance Solutions Landscape, Q2 2025"
Cinthia Portugal

The Future of Enterprise AI Agents Demands Trust: Zenity Included in Forrester's "The AI Governance Solutions Landscape, Q2 2025"

As enterprises rapidly adopt AI Agents to enhance operations, the imperative for robust governance and security...

Research
Bypassing Tenant Isolation in Microsoft Power Platform: A Security Loophole You Should Know
Ziv Hagbi

Bypassing Tenant Isolation in Microsoft Power Platform: A Security Loophole You Should Know

Microsoft Power Platform, specifically Power Automate and Copilot Studio, makes it easy for organizations to quickly...

Research
Building Apps at Scale in Power Platform? Not for the Faint of Heart… or CoE Security
Ziv Hagbi

Building Apps at Scale in Power Platform? Not for the Faint of Heart… or CoE Security

Introduction Enterprises are racing to adopt AI copilots and low-code/no-code platforms to innovate and maximize...

ResearchSecurity
Inherent Data Leakage in Microsoft Fabric Business-Led Development
Ziv Hagbi

Inherent Data Leakage in Microsoft Fabric Business-Led Development

Microsoft Fabric is an end-to-end analytics and data platform that covers a wide range of functionality, including...

ResearchSecurity
What a Vulnerability in Salesforce Apex Code Means for You
Andrew Silberman

What a Vulnerability in Salesforce Apex Code Means for You

What Happened? Varonis researchers have recently disclosed that several government agencies and private-sector...

ResearchSecurity
Potential Data Exposure in ServiceNow: Challenges for Citizen Developers and Security Teams
Andrew Silberman

Potential Data Exposure in ServiceNow: Challenges for Citizen Developers and Security Teams

In a rapidly evolving digital landscape, data security has become a paramount concern within the AppSec community....

Research
Microsoft Power Platform DLP Bypass Uncovered – Finding #5 – Parent and Child Flow Execution
Yuval Adler

Microsoft Power Platform DLP Bypass Uncovered – Finding #5 – Parent and Child Flow Execution

Analysis of Microsoft Power Platform’s security features revealed limitations that could expose organizations...

Research
Zenity Helps Microsoft Identify and Remediate Critical Security Risk in Power Automate Desktop
Andrew Silberman

Zenity Helps Microsoft Identify and Remediate Critical Security Risk in Power Automate Desktop

About seven months ago at Defcon, Zenity CTO Michael Bargury presented security research that discovered and outlined...

Research
Microsoft Power Platform DLP Bypass Uncovered – Finding #4 – Unblockable connectors
Yuval Adler

Microsoft Power Platform DLP Bypass Uncovered – Finding #4 – Unblockable connectors

Hello everyone! I’m Yuval Adler, Customer Success Director at Zenity. I’m inviting you to read my blog series...

Research

Secure Your Agents

We’d love to chat with you about how your team can secure
and govern AI Agents everywhere.

Book Demo