Listen Top Shows Blog

EP 80: Ghost Token

EP 80: Ghost Token

Update: 2023-09-19

Share

Description

What if an GPC project OAUTH access token wasn’t deleted? This could expose databases to bad actors. Tal Skverer from Astrix discusses his DEF CON 31 presentation GhostToken: Exploiting Google Cloud Platform App Infrastructure to Create Unremovable Trojan Apps. Transcript here.

Comments

Top Podcasts

The Best New Comedy Podcast Right Now – June 2024 The Best News Podcast Right Now – June 2024 The Best New Business Podcast Right Now – June 2024 The Best New Sports Podcast Right Now – June 2024 The Best New True Crime Podcast Right Now – June 2024 The Best New Joe Rogan Experience Podcast Right Now – June 20 The Best New Dan Bongino Show Podcast Right Now – June 20 The Best New Mark Levin Podcast – June 2024

In Channel

EP 85: The Rise Of Bots (and Bots As A Service)

EP 85: The Rise Of Bots (and Bots As A Service)

2023-11-2940:49

EP 84: When Old Medical Devices Keep Pre-shared Keys

EP 84: When Old Medical Devices Keep Pre-shared Keys

2023-11-1443:38

EP 83: Tales From The Dark Web: Ransomware, Data Extortion, and Operational Technology

EP 83: Tales From The Dark Web: Ransomware, Data Extortion, and Operational Technology

2023-11-0137:07

EP 82: The Vulkan Files

EP 82: The Vulkan Files

2023-10-1735:09

EP 81: Hacking Visual Studio Code Extensions

EP 81: Hacking Visual Studio Code Extensions

2023-10-0349:11

EP 80: Ghost Token

EP 80: Ghost Token

2023-09-1936:35

EP 79: Conducting Incident Response in Costa Rica Post Conti Ransomware

EP 79: Conducting Incident Response in Costa Rica Post Conti Ransomware

2023-09-0656:50

EP 78: Defending Costa Rica From Conti Ransomware

EP 78: Defending Costa Rica From Conti Ransomware

2023-08-2356:46

EP 77: Security Chaos Engineering with Kelly Shortridge

EP 77: Security Chaos Engineering with Kelly Shortridge

2023-08-0840:32

EP 76: Hacking Medical Systems

EP 76: Hacking Medical Systems

2023-07-2542:00

EP 75: Hacking .Mil And Other TLD Domains (Ethically)

EP 75: Hacking .Mil And Other TLD Domains (Ethically)

2023-07-1248:45

EP 74: Disarming Document Threats

EP 74: Disarming Document Threats

2023-06-2741:37

EP 73: Hacking Human Behavior

2023-06-1336:48

EP 72: Tales From A Ransomware Negotiator

2023-05-3041:31

EP 71: The Internet As A Pen Test

2023-05-1844:49

EP 70: Hacking Real World Criminals Online

EP 70: Hacking Real World Criminals Online

2023-05-0358:00

EP 69: Self-Healing Operating Systems

2023-04-1949:19

EP 68: Incident Response in the Cloud

2023-04-0443:59

EP 67: When The Dark Web Discovered ChatGPT

2023-03-2140:54

EP 66: Shattering InfoSec’s Glass Ceiling

2023-03-0842:55

00:00

00:00

1.0x

EP 80: Ghost Token

EP 80: Ghost Token

Robert Vamosi