Salesforce, Klue, and the OAuth Token Nobody Was Watching
Summary: A vendor called Klue lost control of a GitHub token. That single lapse ended up exposing Salesforce data of its customers. Here is what...
read more
Resources
SSCF v1.0: The Standard That Simplifies SaaS Security
SaaS solutions power everything from HR to analytics, CRM to marketing automation. Yet despite their convenience, the...
Cybersecurity Awareness Month 2025: Is Your Business Ready for Evolving Threats?
Every October, Cybersecurity Awareness Month reminds us that vigilance isn’t just about protecting passwords or avoiding...
Microsoft Entra ID Vulnerability: The Discovery That Shook Identity Security
In July 2025, the cybersecurity world was rocked by security researcher Dirk-jan Mollema's unveiling of a catastrophic...
Beyond Workday: Why Socially Engineered SaaS Breaches Are Spreading
Cybersecurity headlines often highlight stolen databases, ransomware demands, or nation-state exploits. The recent security...
When Simple DNS Mistakes Lead to Big Attacks: Lessons from the MikroTik Botnet
When Simple DNS Mistakes Lead to Big Attacks: Lessons from the MikroTik Botnet Cybersecurity is often seen as a battle...
DNS Security in the Shadow of Rogue Certificates
When Croatia’s Fina CA issued twelve unauthorized TLS certificates for Cloudflare’s 1.1.1.1 resolver, it set off alarms...