Cloud Persistence: Self-Service Password Reset Exploited! #shorts

That's a completely different story, right? And we also say security in for here which we didn't really cover with a print screen, but that is a I think underappreciated persistence technique in the cloud, which is, you know, you have this self-service password reset functionality, and usually you have to have like different factors to do that, and it can be like an alternative email, a phone number, and so on. Um for persistence, the threat actor can update that, and when they want to get back into the account, maybe the investigator forgot to see that those are updated, so they still have control over the account, right? Cuz they can just reset the password.