“Zapocalypse” is a newly disclosed attack chain that shows how attackers could have abused Zapier’s “Code by Zapier” feature to move from a single sandboxed Python step to a potential full-scale Zapier account takeover. The research, carried out by Token Security, is notable because it did not rely on any unknown zero‑days or exotic primitives. […]
The post Zapocalypse Attack Lets Threat Actors Hijack Zapier Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.