Browser Security Explained: Consent Phishing, "Click Fix" Attacks & The Limits of EDR

About this episode

Adam Bateman discusses the dangers of treating Identity Providers like firewalls and the evolution of phishing attacks.

Is your security team treating your Identity Provider (IDP) like a firewall? In this episode, Adam Bateman (CEO & Co-founder of Push Security ) explains why that's a dangerous mistake and how modern attackers are bypassing SSO entirely .Drawing from his background leading red teams that simulated nation-state attacks , Adam breaks down the massive architectural shift from network-based attacks to browser-native exploits. We dive into the terrifying evolution of phishing, from "Click Fix" attacks that trick users into running malicious commands via their clipboard, to "Consent Phishing" that completely takes over Azure without ever touching the endpoint .If your company relies heavily on SaaS applications or Chromebooks, this episode would be a valuable listen. Guest Socials -⁠ ⁠⁠⁠⁠⁠⁠⁠ Adam's Linkedin Podcast Twitter - ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@CloudSecPod⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠…

People in this episode

Guest: Adam Bateman

Topics covered

• browser security
• phishing
• identity provider
• SaaS applications
• cybersecurity

Keywords

• browser-native exploits
• Click Fix attacks
• Consent Phishing
• SSO
• network-based attacks

Mentioned in this episode

Organizations: Push Security, Azure, CloudSecPod

More episodes of Cloud Security Podcast

• Native Cloud Firewalls Falling Short in a Multicloud World · June 11, 2026 · 37 min
• How AI Agents Will Negotiate Your Vendor Contracts · May 27, 2026 · 38 min
• How Claude Mythos Changes Vulnerability Management: From CVSS to Exploitability · May 5, 2026 · 45 min
• AISPM Isn't Enough: How to Apply Zero Trust to AI Agents · April 29, 2026 · 54 min
• The Rise of Agentic Cloud Security: Code-to-Cloud Shrinks to 3 Days · April 21, 2026 · 27 min
• Why EDR Fails at AI Security & The Rise of Endpoint Behavior Modeling · April 14, 2026 · 31 min