How to protect your network from OAuth-enabled cloud-based attacks

The video discusses the SolarWinds hack, focusing on how attackers accessed internal emails using privileged applications in Microsoft Office 365 and Azure environments. It explains Oauth 2.0, highlighting its potential security risks and the importance of configuring Oauth settings to limit third-party access. The video provides a step-by-step guide to setting up admin consent workflows in Azure Active Directory to enhance security. It also covers using Cloud app security to investigate risky applications and emphasizes the need to understand common attack techniques to protect cloud applications effectively.

What intrusion vector was used by the SolarWinds hackers to access internal emails?

Explain the concept of OAuth 2.0 and its purpose in authentication.

What recommendations are given for setting up OAuth settings in an organization?

Describe the admin consent workflow and its importance in managing OAuth applications.

What steps should be taken to investigate risky cloud applications?