Tag: SaaS security

  • Unit 42: Threat Brief: Salesloft Drift Integration Used To Compromise Salesforce Instances

    Source URL: https://unit42.paloaltonetworks.com/threat-brief-compromised-salesforce-instances/ Source: Unit 42 Title: Threat Brief: Salesloft Drift Integration Used To Compromise Salesforce Instances Feedly Summary: This Threat Brief discusses observations on a campaign leveraging Salesloft Drift integration to exfiltrate data via compromised OAuth credentials. The post Threat Brief: Salesloft Drift Integration Used To Compromise Salesforce Instances appeared first on Unit 42.…

  • CSA: Automated SaaS Security That Scales

    Source URL: https://www.valencesecurity.com/resources/blogs/why-your-saas-security-strategy-needs-automated-remediation Source: CSA Title: Automated SaaS Security That Scales Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the vulnerabilities associated with SaaS environments and emphasizes the need for automated remediation workflows to enhance SaaS security. It highlights the challenges of manual remediation due to the decentralized nature of SaaS management…

  • CSA: Consent Phishing: Bypassing MFA with OAuth

    Source URL: https://www.valencesecurity.com/resources/blogs/the-rising-threat-of-consent-phishing-how-oauth-abuse-bypasses-mfa Source: CSA Title: Consent Phishing: Bypassing MFA with OAuth Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the rising threat of consent phishing as a sophisticated attack vector targeting SaaS security, distinct from conventional phishing tactics. By leveraging OAuth 2.0 protocols, attackers can gain persistent access to sensitive resources,…

  • CSA: SaaS Security Lessons from Recent Attacks

    Source URL: https://cloudsecurityalliance.org/articles/cloud-and-saas-security-in-critical-infrastructure-lessons-from-recent-attacks Source: CSA Title: SaaS Security Lessons from Recent Attacks Feedly Summary: AI Summary and Description: Yes **Summary:** The text discusses the increasing threat of cyberattacks on critical infrastructure, particularly in utility sectors like water and energy. It emphasizes the vulnerabilities that arise from adopting cloud-based solutions and proposes advanced security measures, including…