#saassecurity — Public Fediverse posts

SaaS Providers Face Trust Crisis After Canvas Breach

A massive breach of the Canvas learning management system has left 275 million users reeling, compromising student records and disrupting learning at over 8,800 institutions worldwide. The shocking incident has sparked a trust crisis for SaaS providers, raising urgent questions about security and data protection.

https://osintsights.com/saas-providers-face-trust-crisis-after-canvas-breach?utm_source=mastodon&utm_medium=social

#SaasSecurity #LearningManagementSystem #CanvasBreach #Ransomware #DataBreach

SaaS Breaches Expose Gaps in Enterprise Security Thinking

In a shocking display of vulnerability, ShinyHunters breached Instructure's Canvas platform not once, but twice in a single week, siphoning off a staggering 3.65 terabytes of data from 275 million users across 8,000 institutions. The brazen attacks left hundreds of schools reeling during final exams, forcing Canvas offline and lining the…

https://osintsights.com/saas-breaches-expose-gaps-in-enterprise-security-thinking?utm_source=mastodon&utm_medium=social

#SaasSecurity #Shinyhunters #DataBreach #Ransomware #EducationSector

The New Insider Threat May Not Be Human https://youtu.be/tx58w6bEiHg #Cybersecurity #ArtificialIntelligence #AIGovernance #InsiderThreat #AIThreats #DataSecurity #ZeroTrust #IdentitySecurity #SaaSSecurity #RiskManagement #DigitalTrust #CyberRisk #CISO #BoardroomCybersecurity

The New Insider Threat May Not Be Human https://youtu.be/tx58w6bEiHg #Cybersecurity #ArtificialIntelligence #AIGovernance #InsiderThreat #AIThreats #DataSecurity #ZeroTrust #IdentitySecurity #SaaSSecurity #RiskManagement #DigitalTrust #CyberRisk #CISO #BoardroomCybersecurity

Malware Disguised as Roblox Cheats Fuels Vercel Breach

Malware masquerading as Roblox cheats sparked a chain reaction, leading to a significant security breach at Vercel and exposing vulnerabilities in modern cloud and SaaS ecosystems. This incident highlights how a seemingly harmless piece of malware can wreak havoc across connected services.

https://osintsights.com/malware-disguised-as-roblox-cheats-fuels-vercel-breach?utm_source=mastodon&utm_medium=social

#MalwareOperations #Roblox #Vercel #CloudSecurity #SaasSecurity

Malicious Outlook add-in “AgreeToSteal” hijacked a deleted subdomain.

Result:
• 4,000+ accounts compromised
• Fake Microsoft login inside Outlook
• Credit cards + banking data stolen
Manifest validated once. External URL later hijacked.
Architectural gap exposed.

https://www.technadu.com/malicious-outlook-add-in-agreetosteal-compromises-4000-accounts-via-subdomain-takeover/619959/

#InfoSec #Microsoft365 #Phishing #SaaSSecurity

Researchers have disclosed a coordinated campaign involving malicious Chrome extensions impersonating enterprise HR and ERP platforms, including Workday and NetSuite.

The extensions demonstrated capabilities such as:
- Continuous cookie exfiltration
- Blocking of security administration pages via DOM manipulation
- Session hijacking through injected authentication states

The activity highlights persistent risks within browser extension ecosystems, especially when tools present themselves as productivity enhancers.

What detection or control mechanisms do you rely on for extension risk management?

Source: https://thehackernews.com/2026/01/five-malicious-chrome-extensions.html

Engage in the discussion and follow @technadu for vendor-neutral cybersecurity reporting.

#InfoSec #ThreatResearch #BrowserExtensions #SaaSSecurity #AccountTakeover #TechNadu

1Password reshapes its CTO role to confront the rise of AI identity challenges

https://fed.brid.gy/r/https://nerds.xyz/2026/01/1password-reshapes-cto-role-ai/

1Password reshapes its CTO role to confront the rise of AI identity challenges

https://web.brid.gy/r/https://nerds.xyz/2026/01/1password-reshapes-cto-role-ai/

Salesforce is investigating a data theft campaign tied to a compromised Gainsight integration. OAuth token theft - not a Salesforce platform flaw - enabled unauthorized access to certain customer environments.

ShinyHunters claim “almost 1,000” victim organizations and additional access to hundreds of Salesforce instances linked to the earlier Salesloft Drift incident.

Full details:
https://www.technadu.com/salesforce-data-stolen-via-third-party-gainsight-shinyhunters-claim-breach-announce-almost-1000-victims/614158/

Follow us for more SaaS ecosystem security updates.

#CyberSecurity #Salesforce #OAuth #SaaSSecurity #ShinyHunters

Adam Koblentz from RevealSecurity shares why context - not anomalies - drives SaaS threat detection.

Lessons from the Salesloft Drift breach show why raw app logs aren’t enough without normalization and business semantics.

Read full interview:
https://www.technadu.com/context-is-key-what-the-salesloft-drift-breach-reveals-about-saas-security-gaps/610244/

#SaaSSecurity #UEBA #IdentityAnalytics #ZeroTrust

Gary Brickhouse (GuidePointSec CISO) told TechNadu:

“Without funding tied to identity controls like anomaly detection, the investment in your castle walls won’t matter when a threat actor walks through your front door.”

Read full interview 👉 https://www.technadu.com/when-identity-blind-spots-and-saas-oversight-define-the-next-breach/608752/

#IdentitySecurity #ZeroTrust #SaaSSecurity

Gary Brickhouse (GuidePointSec CISO) told TechNadu:

“Without funding tied to identity controls like anomaly detection, the investment in your castle walls won’t matter when a threat actor walks through your front door.”

Read full interview 👉 https://www.technadu.com/when-identity-blind-spots-and-saas-oversight-define-the-next-breach/608752/

#IdentitySecurity #ZeroTrust #SaaSSecurity

One weak app integration exposed some of the world’s largest companies, from Cloudflare to Palo Alto Networks.

Our latest blog breaks down the Salesforce–Drift breach: how attackers turned insecure OAuth tokens into skeleton keys, why the headlines were misleading, and — most importantly — what CISOs and IT leaders must do to defend against the next SaaS supply chain attack.

👉 Read the full article: https://www.lmgsecurity.com/connected-app-connected-risk-lessons-from-the-salesforce-drift-breach/

#Cybersecurity #SupplyChainRisk #SaaSSecurity #LMGSecurity

Salesforce breaches by ShinyHunters are shaking up the tech world—major companies like Google and Cloudflare caught off guard by sneaky token hacks. How safe is your data in the cloud? Read more to find out.

https://thedefendopsdiaries.com/navigating-the-storm-salesforce-breaches-and-the-shinyhunters-threat/

#salesforcebreach
#shinyhunters
#saassecurity
#cloudsecurity
#cyberthreats

Microsoft 365 credential theft is evolving—and AI tools like Microsoft Co-Pilot are becoming attackers' latest weapons!

Watch our new, 4-minute video, to learn how attackers use #CoPilot for rapid reconnaissance and fraud, see real-world phishing examples targeting Microsoft 365, Adobe, and DocuSign, and understand why SSO and OAuth vulnerabilities significantly amplify credential risks.

We'll also share essential steps to protect your organization! https://youtu.be/zaBwxy1Gjhc

#Microsoft365 #CredentialTheft #Cybersecurity #CoPilotSecurity #Phishing #ZeroTrust #AIThreats #SaaSsecurity #DocuSignPhishing #M365 #Cyberaware #InfoSec #CloudSecurity

CISA Unveils Guidelines to Combat AI-Driven Cyber Threats – Source: securityboulevard.com https://ciso2ciso.com/cisa-unveils-guidelines-to-combat-ai-driven-cyber-threats-source-securityboulevard-com/ #rssfeedpostgeneratorecho #SecurityBloggersNetwork #CyberSecurityNews #SecurityBoulevard #Risk&Compliance #SaaSSecurity #Compliance #Governance

CISA Unveils Guidelines to Combat AI-Driven Cyber Threats – Source: securityboulevard.com https://ciso2ciso.com/cisa-unveils-guidelines-to-combat-ai-driven-cyber-threats-source-securityboulevard-com/ #rssfeedpostgeneratorecho #SecurityBloggersNetwork #CyberSecurityNews #SecurityBoulevard #Risk&Compliance #SaaSSecurity #Compliance #Governance

Fortify Your SaaS Security 10 Proven Strategies To Minimize Risks
In today's digital age, Software as a Service (SaaS) has become a popular choice for businesses looking to streamline their operations and increase efficiency
#SaaSSecurity #Cybersecurity #DataProtection #RiskManagement #CloudSecurity #InfoSec #SecurityStrategies #TechSafety #SaaSTips #DigitalSecurity #news #tech #hack #security
https://cloudhosting.evostrix.eu/fortify-your-saas-security-10-proven-strategies-to-minimize-risks/

What is SaaS Security? Benefits, Challenges, and Best Practices - In today’s world, technology dominates everything from the simplest to the most co... - https://readwrite.com/what-is-saas-security-benefits-challenges-and-best-practices/ #dataandsecurity #saassecurity

AppOmni raises $40M for tools to secure enterprise SaaS apps - Enterprises are adopting an ever-wider range of SaaS applications to work and inte... - http://feedproxy.google.com/~r/Techcrunch/~3/6i9aO0m5gP4/ #saassecurity #enterprise #security #appomni #saas