AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Critical Thinking - Bug Bounty Podcast
Episode 108: How to Hack Salesforce, ServiceNow, and Other SaaS Products With Aaron Costello
Jan 30, 2025
Aaron Costello, a SaaS security expert known for his insights on misconfigurations, dives into the complexities of hacking Salesforce, ServiceNow, and Power Pages. He humorously contrasts hacker stereotypes with dedicated bug bounty hunters. Discussion includes the dangers of file upload vulnerabilities and the significance of proper access controls. Notably, he explores Sockle injection vulnerabilities and the intricacies of Salesforce Apex classes, while emphasizing collaboration in identifying security flaws across various SaaS platforms. Tune in for practical techniques and insider insights!
01:31:08
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Misconfigurations in SaaS platforms, such as Salesforce and ServiceNow, pose significant risks leading to data exposure and breaches.
- Bug bounty programs foster collaboration between companies and ethical hackers, yielding insights into vulnerabilities and enhancing overall security.
Deep dives
The Importance of SaaS Security
SaaS security is critical in today's digital landscape as organizations increasingly rely on cloud-based services. Misconfigured access controls in SaaS platforms can lead to data breaches, exposing sensitive information. The podcast emphasizes that many companies rushing to implement SaaS solutions often overlook security protocols, creating vulnerabilities. It highlights the role of dedicated security companies, like App Omni, in addressing these issues by providing tools to identify and remediate misconfigurations.
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode