Threat Actor using TeamFiltration tool in large-scale account takeover

Proofpoint researchers have identified an ongoing and active account takeover (ATO) campaign active since December 2024.

Expand SaaS and AI security governance with our new browser extension

Enrich your understanding of SaaS and AI usage with real-time data and promote safe security practices with browser nudges.

Managing vendor risk in the SaaS supply chain

Why effective vendor risk management is a critical strategy for identifying, assessing, and mitigating risks within the SaaS supply chain.

Financially motivated threat actor targeting Salesforce instances for large-scale data theft

Google Threat Intelligence Group has identified a financially motivated threat actor conducting voice phishing campaigns aimed at breaching Salesforce instances.

The new HIPAA security rule: Why SaaS security and identity governance can’t wait

As HIPAA modernizes its standards for a SaaS & AI-powered world, healthcare organizations require new approaches to safeguarding access to sensitive data.

A complete guide to shadow IT discovery

Why comprehensive shadow IT discovery is an essential first step toward securing an organization's SaaS estate.

Understanding SaaS data governance best practices

How to streamline all aspects of your SaaS data governance process, ensuring that technology is onboarded, managed, and secured properly.

The dangers of rogue AWS accounts

How can you effectively secure your company’s cloud accounts when you don’t know that they exist?

Threat actors continue to create Chrome extensions impersonating Fortinet and VPN providers

Since February 2024, an unknown threat actor has seeded 100+ malicious Google Chrome extensions that masquerade as legitimate tools.

Threat actor targeting Commvault SaaS cloud application

CISA issued an alert on May 22 warning that threat actors had compromised Commvault's Azure-hosted Metallic SaaS backup platform.

Upcoming Microsoft OneDrive feature could expose sensitive data

Microsoft is rolling out a new feature in June 2025 that encourages enterprise users signed into their corporate OneDrive on Windows devices to also sign into their personal OneDrive accounts.

Why SaaS security has become a “now” problem

SaaS security isn't just another cybersecurity trend—it's a fundamental recognition that the traditional security paradigm is failing to address modern threats.

Snowflake Cortex AI Search service can expose sensitive data

A recent analysis by Cyera uncovered unexpected behavior within Snowflake’s Cortex AI Search Service, a powerful tool for AI-driven search and retrieval.

Securing the Workforce Edge: A new paradigm for SaaS security

In today's world of distributed workforces and rapid SaaS adoption, organizations need a new approach to technology governance—one that empowers employees while maintaining security.

Mandiant’s 2025 M-Trends report highlights SaaS security as a significant source of risk

This year's report findings cast a stark light on an increasingly vulnerable SaaS attack surface.

Your RSA survival guide: How to get the most out of security conferences

With RSA around the corner and Black Hat following soon, we set out to find out if security practitioners still find value in these “mega” conferences.

Exploring AI governance: 5 strategies for your organization

Learn what AI governance is, why it matters, and five actionable strategies to strengthen AI security in your organization.

The definitive guide to SaaS security posture management

How SSPM solutions help automate the detection, remediation, and reporting of configuration issues, identity risks, and other SaaS security threats.

Supply chain attack affecting multiple GitHub actions

On March 14, 2025, attackers compromised a popular GitHub action, injecting malicious code to expose sensitive CI/CD secrets within workflow logs.

Thousands of live API keys and passwords found exposed in training data

On February 27, 2025, security researchers revealed that LLMs were trained on datasets containing approximately 12,000 live API keys and passwords.

Microsoft’s Copilot found exposing thousands of private GitHub repositories

On February 27, 2025, security researchers from cybersecurity company Lasso discovered a serious data exposure issue involving Microsoft's Copilot.

How cloud sync and other SaaS dark patterns can put your organization at risk

While SaaS features and discounts offer many conveniences, some of the industry's darker patterns can put your organization at risk.

Why non-human identity management is critical to SaaS security

Protecting your organization’s data from NHI risks shouldn’t be a guessing game. Our app-to-app integrations table is here to help.

The rise of DeepSeek and the implications of shadow AI

The swift success of DeepSeek comes with pressing concerns about data security, regulatory compliance, and the hidden risks of shadow AI.