The Zenity Blog

December 20th, 2024

All I Want For The Holidays Is…. Powerpwn
In the ever-evolving landscape of cybersecurity, the use of open-source red teaming tools has become indispensable. These tools not only raise awareness about potential vulnerabilities but also encourage security teams to think like attackers so they can begin the process of protecting their organizations against them. By simulating real-world attack scenarios, organizations can better understand…
Blog
17 Search results for:
See all Current Events Events Product Research Security
Michael Bargury

ZAPESCAPE: Organization-wide control over Code by Zapier
In the middle of March 2022, Zenity research team discovered a sandbox-escape vulnerability in Code by Zapier, a service used by Zapier to…
Research
Michael Bargury

ZAPESCAPE: Vulnerability Disclosure
Date: March 16th 2022 Severity: High Security impact: Privilege Escalation, Data Leakage, Data Manipulation Intro This document is the…
Research
Michael Bargury

Zapier Storage Exposes Sensitive Customer Data Due to Poor User Choices
Zenity research team has recently discovered a potential customer data leakage in Storage by Zapier, a service used for simple environment…
Research
Michael Bargury

Microsoft Power Pages: Low-code Misconfiguration Remains a Top Security Risk
Where is low-code going in 2022? 4 low-code trends that we’ve observed, and our predictions for how they’ll play out in 2022.
Research
Michael Bargury

The Microsoft Power Apps Portal Data Leak Revisited: Are You Safe Now?
What happened In late August 2021, a major data leak exposed where 38 million private records through Microsoft’s Power Apps…
Research
Load More