All You Need is Guest

Explore the critical security vulnerabilities associated with Azure AD guest accounts in this eye-opening 38-minute Black Hat conference talk. Discover how external parties can exploit undocumented APIs to bypass limitations and gain unauthorized access to sensitive enterprise resources. Learn about the potential risks to corporate SQL servers, SharePoint sites, and KeyVault secrets. Presented by Michael Bargury, this session challenges the common assumption that guest accounts pose minimal security threats, providing valuable insights for IT security professionals and enterprise administrators.