Service account

Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable for Takeover, Says Cybersecurity Company Hunters

Retrieved on: 
torsdag, december 21, 2023
Cloud, Service account, Organization, JWt (Java web toolkit), API, JSON, Administrator, Google Workspace, GCP, Publishing, Google Cloud Platform, Security, Software as a service, OAuth, DWD, Posture, Theft, GWS, JWT, Google Drive, Iams, Long Life, Research, Google Calendar, Hunting, Mobile phone, Risk management, Nursing, Gmail, Workspace

Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable for Takeover, Says Cybersecurity Company Hunters

Key Points: 
  • Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable for Takeover, Says Cybersecurity Company Hunters
    The issuer is solely responsible for the content of this announcement.
  • Domain-wide delegation permits a comprehensive delegation between Google Cloud Platform (GCP) identity objects and Google Workspace applications.
  • In other words, it enables GCP identities to execute tasks on Google SaaS applications, such as Gmail, Google Calendar, Google Drive, and more, on behalf of other Workspace users.
  • The design flaw, which the team at Hunters has dubbed “DeleFriend,” allows potential attackers to manipulate existing delegations in GCP and Google Workspace without possessing the high-privilege Super Admin role on Workspace, which is essential for creating new delegations.

Itential Debuts Latest Release of its Low-Code Automation Platform; Includes Enhanced Capabilities to Further Simplify & Scale Network Automation

Retrieved on: 
måndag, juni 5, 2023
Cloud, JSON, Software as a service, Workflow, API, Automation, Automation Studio, Architecture, LAS, Organization, Stephanie Forrest, ZTNA, Service account, IAP, Terraform, Configuration, Mobile phone, Video game, Ansible, Gartner

LAS VEGAS, June 5, 2023 /PRNewswire-PRWeb/ -- Itential, the leader in hybrid cloud network automation and orchestration, today announced the latest release of its low-code Itential Automation Platform (IAP). The new features enable network teams to deliver and scale automations and enforce network compliance faster and with greater accuracy than ever before. Itential is providing information and demonstrations of the IAP 23.1 release throughout Cisco Live at booth #4402.

Key Points: 
  • New, intuitive automation canvas and advanced configuration management for cloud-native infrastructure, the latest Itential Automation Platform release makes it easier than ever to automate quickly and accurately
    LAS VEGAS, June 5, 2023 /PRNewswire-PRWeb/ -- Itential , the leader in hybrid cloud network automation and orchestration, today announced the latest release of its low-code Itential Automation Platform (IAP).
  • The new features enable network teams to deliver and scale automations and enforce network compliance faster and with greater accuracy than ever before.
  • Itential is providing information and demonstrations of the IAP 23.1 release throughout Cisco Live at booth #4402 .
  • "With our latest platform enhancements, Itential is further empowering network teams to extend network management and automation across on-prem and cloud infrastructure — facilitating collaboration and standardization."