AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Risky Business
Risky Business #777 -- It's SonicWall's turn
Jan 29, 2025
Luke Jennings, a security researcher at Push Security, dives into the pitfalls of federated authentication, emphasizing how attackers exploit unexpected identity providers. He highlights alarming vulnerabilities in SonicWall devices and a comical DNS mishap involving MasterCard. The discussion also touches upon the risks of using personal Google accounts for corporate access and the complexities of managing multiple identity providers. With an eye on emerging threats, Jennings provides insights into securing user authentication in today's digital landscape.
51:26
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- SonicWall's critical vulnerability highlights the pressing risks of unaddressed software security in corporate edge devices, inviting increased cyber threats.
- The data breach at PowerSchool underscores the dangers associated with centralized data management systems in schools, raising ethical questions about information security.
Deep dives
The Risks of Cross IDP Impersonation
Cross IDP impersonation poses a significant threat as individuals register personal accounts on corporate email domains, compromising security. Attackers exploit this by leveraging the simplicity of federated authentication, allowing them to bypass standard Single Sign-On (SSO) protections. These impersonated accounts can access sensitive applications using legitimate access methods, effectively becoming invisible to the organization's security protocols. This often leads to ghost logins, where unauthorized users appear to have legitimate access without the organization realizing the security breach.
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode