Summary: A vendor called Klue lost control of a GitHub token. That single lapse ended up exposing Salesforce data of its...
Salesforce, Klue, and the OAuth Token Nobody Was Watching
read more
Security Breaches
6 Places Pharma Data Goes That Security Teams Can’t Always See
Executive Summary: Pharmaceutical companies are moving sensitive patient, research, clinical, and intellectual property...
The Cost of Assuming Your Cloud Is Secure
Executive Summary: The Nextcloud data exposure is a reminder that cloud security failures rarely announce themselves. A...
When One Extra Letter Costs $545,000: Defending Your Domain Against Typosquatting
Executive Summary The $545,000 Surfside Beach fraud demonstrates a growing security blind spot: attackers don’t need to...
The New Face of Identity Attacks: Why Phishing No Longer Needs Your Password
Executive Summary: The latest identity attacks reveal a fundamental shift in phishing: attackers no longer need to steal...
When One SaaS Platform Fails: The Hidden Risk of Digital Dependency
Executive Summary: The Canvas breach underscores a broader reality facing every organization: as SaaS platforms become...
The SaaS Security Problem Most Organizations Still Treat Like an IT Issue
For years, organizations approached SaaS security as an access management problem. Enable SSO. Turn on MFA. Provision users...
5 Reasons Email Metadata Leaks Become Much Bigger Security Problems Than Organizations Expect
When most organizations think about email-related breaches, they focus on one thing: content exposure. Was the email body...
The Operational Reality Behind Salesforce Misconfiguration Risks
Salesforce’s recent security advisory on Experience Cloud guest user access is notable as it reveals a new class of...