GitLost

Noma's Workflow Identity Hijacking turns a service account into a privilege proxy for strangers

Sasi Levi told Lets Data Science the pattern recurred across more than five workflow environments, though he declined to give a success rate, and says systems held when authorization was re-checked at the point of data access.