Power Hacking with Microsoft Power Platform - Navigating Vulnerabilities and External Attack Surface
Microsoft Power Platform security is now on every CISO’s radar, as citizen developers build Power Apps, Power Automate flows, Power BI reports and Power Pages on top of live business data. In this webinar, Nokod Security co founder and CTO Amichai Shulman shows how “small” apps and internal automations quietly grow into a real external attack surface that your classic AppSec stack does not see.
You will see real examples of low code no code security gaps in Microsoft Power Platform, from client side data access issues to injection attacks and accidental data exposure. Amichai connects them to core topics like power platform security, microsoft power platform security, power apps security, power automate security, power bi security, no code application security, shadow it security, citizen developer governance and DLP limits, so you can turn a vague concern into a clear security plan.
🔍 In this session you will see:
✅ How citizen development on Power Apps, Power Automate, Power Pages and Power BI really looks inside large enterprises
✅ Why “local and non critical” apps often query sensitive data and create compliance risk
✅ How client side filters in Power Apps can leak full tables, including salary data
✅ Injection attacks in flows built on Microsoft Forms, email and Dataverse, and how they lead to data leakage
✅ How simple sharing mistakes in Power BI, OneDrive and SharePoint expose reports and files to the internet
✅ What Power Platform DLP policies and the Microsoft COE toolkit cover, and where security gaps remain
✅ How to think about shadow IT, external attack surface and citizen developer governance for Power Platform at scale
✅ How Nokod Security helps AppSec and platform teams gain visibility, find risky apps and flows, and push clear fixes to business users
🎙 Speaker
Amichai Shulman, Co founder & CTO, Nokod Security, long time application security researcher and former Imperva CTO.
📌 If you own Power Platform governance, DLP, AppSec or shadow IT risk, this session will help you speak clearly about power platform security with business owners and push for a safer model for citizen development.
🌐 Learn more about Nokod Security
Website: https://nokodsecurity.com
LinkedIn: / nokodsecurity
👍 Like this video if it gave you new angles on Microsoft Power Platform security
💬 Comment with your biggest concern around Power Apps, Power Automate or Power BI security
🔔 Subscribe to Nokod Security for more content on low code no code security, RPA security and AI agent security