Black Hat·37 min
Jenko Hwong
Engineers explore architecture and security mechanisms for IAM Concerned: OAuth Token Hijacking in Google Cloud (GCP).
iamoauthgcp
Jenko Hwong
6 talks in the archive.
Filters+
Loading filters…
1–6 of 6 talks · loading…
Cloud Village·33 min
Jenko Hwong
Decoding the Storm-2372 threat actor campaign targeting cloud and identity infrastructure.
cloudthreat-intelmicrosoft+1
OWASP Foundation·1 hr
Jenko Hwong
Jenko Hwong analyzes Defending Against New Phishing Attacks that Abuse OAuth Authorization Flows.
phishingoauthauthorization
RSAC Cybersecurity·30 min
Jenko Hwong
Engineers explore architecture and security mechanisms for See Yourself in Cyber: A NCSAM Discussion with Jenko Hwong.
yourselfncsamdiscussion+2
Live Presentations·48 min
Jenko Hwong
Jenko Hwong demonstrates live phishing attacks exploiting OAuth 2.0 device authorization flows, bypassing MFA and hijacking cloud session tokens.
oauthphishingsso+2
Main Stage·46 min
Jenko Hwong
Jenko Hwong demonstrates weaponizing OAuth 2.0 Device Authorization Grant flows, creating phishing attacks that bypass MFA without fake login domains.
oauthphishingsso+2