Passwordless and SSO solutions have become extremely popular, mostly due to their ability to balance convenience and security. But are they bulletproof? Join to learn how these technologies have changed the attack surface. Using Windows Hello and Browser SSO in Hybrid Azure environments, the presenters will demonstrate successful attack methods and provide actionable mitigation techniques.

RSA® Conference, the world’s leading information security conferences and expositions, concluded its 30th annual event, which took place as a fully virtual experience this week. This year’s theme was Resilience, and in honor of all that the cybersecurity industry has accomplished over the past three decades, offered a must-attend celebration of thought leadership and education.


More than 20,000 people registered to view 449 sessions including, keynotes, track sessions, interactive programs, tutorials, seminars, and many special digital-first programs that focused on best practices and innovation. The content covered many of the industry’s most pressing topics, including privacy, machine learning and artificial intelligence, analytics, anti-fraud, policy and government, and risk management and governance.

The Attacker’s Guide to SSO and Passwordless Technologies

Conference: RSA Conference 2021

Abstract

Post a comment

Related work

Exploiting Windows Exploit Mitigation for ROP Exploits

ChaosDB: How We Hacked Databases of Thousands of Azure Customers

Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks

Grand Theft House: RF Lock Pick Tool to Unlock Smart Door Lock