Security News

LUCR-3: Scattered Spider Getting SaaS-y in the Cloud
2023-10-02 11:21

LUCR-3 overlaps with groups such as Scattered Spider, Oktapus, UNC3944, and STORM-0875 and is a financially motivated attacker that leverages the Identity Provider (IDP) as initial access into an...

Guide: SaaS Offboarding Checklist
2023-09-27 02:45

Download this template from Nudge Security for the essential steps of IT offboarding in the age of SaaS. This employee offboarding checklist covers the murky territory of offboarding SaaS access for departing employees-a land of common pitfalls and missed steps. Download a tailored Google Sheet outlining the eight essential steps of employee IT offboarding, fine-tuned to ensure business continuity and data security in our increasingly remote, distributed, SaaS-first world of work.

7 Steps to Kickstart Your SaaS Security Program
2023-09-12 10:42

Each SaaS application presents unique security challenges, and the landscape constantly evolves as vendors enhance their security features. Before embarking on a SaaS security journey, it's imperative to understand your organization's specific landscape and security needs.

IT leaders alarmed by generative AI’s SaaS security implications
2023-08-29 03:00

96% of respondents indicated they were still 'confident or very confident' in their organization's SaaS security measures, and yet, 'managing the security of SaaS applications' is the top challenge for IT leaders. The effects of generative AI. IT leaders must now factor the effects of generative AI, such as ChatGPT, into their overall SaaS security approach.

CISOs Tout SaaS Cybersecurity Confidence, But 79% Admit to SaaS Incidents, New Report Finds
2023-08-22 11:20

A new State of SaaS Security Posture Management Report from SaaS cybersecurity provider AppOmni indicates that Cybersecurity, IT, and business leaders alike recognize SaaS cybersecurity as an increasingly important part of the cyber threat landscape. When asked to rate the SaaS cybersecurity maturity level of their organizations, 71% noted that their organizations' SaaS cybersecurity maturity has achieved either a mid-high level or the highest level.

How to Protect Patients and Their Privacy in Your SaaS Apps
2023-07-24 12:10

The healthcare industry was hesitant to adopt SaaS applications. Learn how to secure your entire SaaS stack with an SSPM solution.

Defend Against Insider Threats: Join this Webinar on SaaS Security Posture Management
2023-07-14 11:08

As security practices continue to evolve, one primary concern persists in the minds of security professionals-the risk of employees unintentionally or deliberately exposing vital information. While access controls, encryption, and monitoring systems are crucial for identifying and mitigating unauthorized access and suspicious activities, the increasing prevalence of cloud-based environments and the surge in SaaS application usage demand a fresh perspective on Insider Risk Management from a SaaS security standpoint.

Global Retailers Must Keep an Eye on Their SaaS Stack
2023-07-10 11:35

Brick-and-mortar retailers and e-commerce sellers may be locked in a fierce battle for market share, but one area both can agree on is the need to secure their SaaS stack. Clearly, retailers must take concrete steps to secure their SaaS stack.

53% of SaaS licenses remain unused
2023-07-04 03:30

Productiv analyzed how nearly 100 million SaaS licenses were used over the last three years - including more than 100 billion app usage data points to produce an in-depth look at pivotal SaaS stats and insights on SaaS growth, spend, consolidation and usage. SaaS growth continues apace, even as companies improve SaaS spend management.

3 Reasons SaaS Security is the Imperative First Step to Ensuring Secure AI Usage
2023-06-30 11:31

They raise legitimate questions about the usage and permissions of AI applications within their infrastructure: Who is using these applications, and for what purposes? Which AI applications have access to company data, and what level of access have they been granted? What is the information employees share with these applications? What are the compliance implications? Each AI tool presents a potential attack surface that must be accounted for: Most AI applications are SaaS based and require OAuth tokens to connect with major business applications such as Google or O365.