One Attacker Scrapes Salesforce and ServiceNow Portals Since 2025
A single threat actor has been systematically scraping data from Salesforce and ServiceNow customer portals for over a year, according to research…
Tag: SaaS Security
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
A recent wave of cyber attacks targeting financial services, private equity, and professional services has been attributed to the data extortion group…
AI Agent Security: Why Visibility Alone Fails and Enforcement Must Follow
AI agent security is evolving from visibility to enforcement, but many organizations remain stuck in the discovery phase. According to a new…
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Cybersecurity researchers at Zenity Labs have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents, codenamed AgentForger, that could allow a single…
SASE Has an AI Blind Spot: Why Packet Inspection Falls Short in Modern Enterprise Security
For years, routing traffic through cloud proxies was sufficient for enterprise security. However, the shift to browser-based work, SaaS applications, and generative…
Shadow AI’s Real Threat Is Access Control, Not Data Leakage
The cybersecurity landscape is shifting as Shadow AI evolves from a data leakage concern to a critical access control problem. According to…