The Zenity Blog

December 20th, 2024

All I Want For The Holidays Is…. Powerpwn
In the ever-evolving landscape of cybersecurity, the use of open-source red teaming tools has become indispensable. These tools not only raise awareness about potential vulnerabilities but also encourage security teams to think like attackers so they can begin the process of protecting their organizations against them. By simulating real-world attack scenarios, organizations can better understand…
Blog
17 Search results for:
See all Current Events Events Product Research Security
Ziv Daniel Hagbi

Building Apps at Scale in Power Platform? Not for the Faint of Heart… or CoE Security
Introduction Enterprises are racing to adopt AI copilots and low-code/no-code platforms to innovate and maximize efficiency by placing…
Research Security
Ziv Daniel Hagbi

Inherent Data Leakage in Microsoft Fabric Business-Led Development
Microsoft Fabric is an end-to-end analytics and data platform that covers a wide range of functionality, including data movement,…
Research
Andrew Silberman

What a Vulnerability in Salesforce Apex Code Means for You
The obfuscated nature of custom Apex code that is used in internal Salesforce instances and apps (i.e. Lightning, Lightning Communities)…
Research Security
Andrew Silberman

Potential Data Exposure in ServiceNow: Challenges for Citizen Developers and Security Teams
In a rapidly evolving digital landscape, data security has become a paramount concern within the AppSec community. As organizations embrace…
Research
Yuval Adler

Microsoft Power Platform DLP Bypass Uncovered – Finding #5 – Parent and Child Flow Execution
Analysis of Microsoft Power Platform’s security features revealed limitations that could expose organizations to security risks, such…
Research
Andrew Silberman

Zenity Helps Microsoft Identify and Remediate Critical Security Risk in Power Automate Desktop
About seven months ago at Defcon, Zenity CTO Michael Bargury presented security research that discovered and outlined a way to take over…
Research
Yuval Adler

Microsoft Power Platform DLP Bypass Uncovered – Finding #4 – Unblockable connectors
Hello everyone! I’m Yuval Adler, Customer Success Director at Zenity.  I’m inviting you to read my blog series where I share new…
Research
Uriel Zilberberg

The Cross-Tenant Power Platform Connectors Vulnerability – Are You Safe Now?
What Happened Last week, on March 31st, NetSPI researchers announced that they found a cross-tenant Azure vulnerability in the Microsoft…
Research
Andrew Silberman

NetSPI Finds a Power Platform Vulnerability. 4 Things to Do About It
Recent research from penetration testing company NetSPI found that Azure on-premises data gateways allow Power Platform and Power BI to…
Research
Yuval Adler

Microsoft Power Platform DLP Bypass Uncovered – Finding #3 – Custom Connectors
Hello everyone! I’m Yuval Adler, Customer Success Director at Zenity. I’m inviting you to read my blog series where I will share new…
Research
Yuval Adler

Microsoft Power Platform DLP Bypass Uncovered- Finding #2 – HTTP calls
Hello everyone! I’m Yuval Adler, Customer Success Director at Zenity. I’m inviting you to read my blog series where I will share new…
Research
Yuval Adler

Microsoft Power Platform DLP Bypass Uncovered- Finding #1
Hello everyone! I’m Yuval Adler, Customer Success Director at Zenity. I’m inviting you to read my blog series where I share new…
Research
Load More