Reading Conditional Access Policies Without Admin Privileges - Security Vulnerabilities and Implications

Learn how to identify and exploit vulnerabilities in Conditional Access Policies without administrative privileges in this DefCamp 2024 conference presentation delivered by Viktor Hedberg, Senior Technical Architect, and Hasain Alshakarti, Principal Cybersecurity Advisor from Truesec. Explore critical security insights shared at one of Central and Eastern Europe's premier cybersecurity events, which gathered over 2,000 professionals from 50 countries. Gain valuable knowledge about potential security gaps in access control systems, demonstrated by leading industry experts at this 45-minute session from the 13th edition of DefCamp, an established conference that has attracted more than 15,000 participants from over 60 countries since its inception in 2011.