BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Your SaaS Is My Foothold: Weaponizing Shadow SaaS fo
 r Initial\n   Access and Persistence\n   Tags: Adversary Village | Creator
  Talk/Panel\n   When: Friday\, Aug 7\, 15:30 - 15:55 PDT\n   Where: LVCCW 
 Level 1 Hall 2 602 (Adversary Village) Hands-on Activity\n   Area - [1]Map
 \n\n   Description:\n\n   Modern enterprise environments have shifted beyo
 nd traditional network\n   perimeters\, with SaaS applications and identit
 y providers becoming the\n   primary attack surface. However\, a significa
 nt portion of this still\n   remains unmanaged or invisible commonly refer
 red as Shadow SaaS.\n\n   This session explores Shadow SaaS from an attack
 er’s perspective\,\n   demonstrating how adversaries can identify\, eval
 uate\, and abuse\n   unmanaged SaaS applications to gain initial access an
 d maintain\n   persistence within target environments.\n\n   Rather than f
 ocusing on inventory or governance\, this talk reframes\n   Shadow SaaS as
  an offensive opportunity. It highlights how implicit\n   trust relationsh
 ips\, and third-party SaaS connections expand the\n   attack surface beyon
 d traditional security visibility.\n\n   Using the Shadow SaaS Surface Sca
 nner\, we demonstrate how attackers\n   can uncover hidden SaaS exposure a
 nd leverage it as a foothold into\n   enterprise environments.\n\n   Speak
 erBio:  Jordan Bonagura\n\n   Senior Security Consultant at Secure Ideas R
 esearcher in Information\n   Security Stay Safe Podcast Founder Computer S
 cientist Post Graduated\n   in Business Strategic Management\, Innovation 
 and Teaching Founder -\n   Vale Security Conference - Brazilian Conference
  Consultant Member -\n   Brazilian Comission of High Tech Crime (OAB / SP)
  Coordinator and\n   Teacher in IT area SJC Hacker Space President Speaker
  (DefCon\, Hack\n   Space Con\, Hack Red Con\, Hack Miami\, Triangle InfoS
 ec\, AppSec\n   California\, GrrCon\, BalCCon2k14\, BSides Augusta\, H2HC\
 , Angeles Y\n   Demonios\, Silver Bullet\, Seginfo\, ITA\, INPE\, etc)\n\n
    Links:\n       adversaryvillage.org/adversary-events/DEFCON-34/Jordan-B
 onagura/ -\n   [2]https://adversaryvillage.org/adversary-events/DEFCON-34/
 Jordan-Bonagura/\n   '\n\n   1. #LVCCW_Level1_Hall2\n   2. https://adversa
 ryvillage.org/adversary-events/DEFCON-34/Jordan-Bonagura/\n\n\n
DTEND:20260807T225500Z
DTSTART:20260807T223000Z
LOCATION:Adversary Village - LVCCW Level 1 Hall 2 602 (Adversary Village) H
 ands-on Activity Area
SUMMARY:Your SaaS Is My Foothold: Weaponizing Shadow SaaS for Initial Acces
 s and Persistence
END:VEVENT
END:VCALENDAR