saas security

  1. How Microsoft 365's Direct Send Feature Is Being Exploited in Sophisticated Phishing Attacks

    A new wave of phishing attacks has cast a harsh spotlight on the security assumptions underlying Microsoft 365, as cybercriminals adapt with alarming speed to exploit lesser-known features. Over the past two months, a sophisticated campaign has targeted more than 70 organizations across critical...
  2. Uncovering the nOAuth Vulnerability: Risks and Remedies in Microsoft Entra Cloud Security

    Microsoft’s cloud ecosystem continues to underpin enterprise digital transformation—yet the discovery and persistence of the nOAuth vulnerability within Entra-integrated applications shines a harsh light on lingering risks at the intersection of identity management, software-as-a-service, and...
  3. nOAuth Vulnerability: The Hidden Threat Endangering 15,000+ SaaS Apps and How to Protect Your Enterprise

    A critical authentication flaw within Microsoft’s Entra ID ecosystem continues to threaten tens of thousands of enterprise applications worldwide, illustrating a profound challenge for the current state of SaaS security two years after its discovery. The vulnerability, dubbed “nOAuth,” first...
  4. Netskope and Microsoft Purview Integration Boosts Enterprise Data Security

    In a significant move to bolster enterprise data security, Netskope has announced an integration with Microsoft Purview, aiming to provide organizations with comprehensive protection across enterprise, cloud, and AI environments. This collaboration is set to enhance data discovery...
  5. Asana Data Breach Highlights AI Security Risks in Enterprise SaaS Platforms

    Major security events in enterprise software rarely unfold in isolation; instead, they are often woven into broader technological trends and industry shifts. Such is the case with the recent disclosure from Asana, the globally popular project management platform, admitting that a critical bug in...
  6. Zscaler ThreatLabz 2025 Data@Risk Report: Safeguarding Enterprise Data in an AI-Driven World

    As enterprise technology races forward at a breakneck pace, organizations are reaping the rewards of digital transformation—bolstered by cloud adoption, generative AI tools, and a sprawling SaaS ecosystem. Yet, while the benefits of this connectivity are clear, the dramatic expansion of the...
  7. Netskope and Microsoft Partnership: The Future of Cloud Security & AI-Driven Data Protection

    In an era where cloud computing and artificial intelligence are reshaping the digital landscape, the partnership between Netskope and Microsoft stands as a pivotal force in enterprise security. Both companies, renowned for their respective advances in security and compliance, have deepened their...
  8. Securing Microsoft 365: Lessons from The Washington Post Cyberattack Failure

    In the first week of June, the cybersecurity landscape took another sobering turn when The Washington Post fell victim to a targeted email account compromise. Multiple Microsoft 365 work email accounts belonging to journalists were breached, prompting urgent password resets and a rapid...
  9. EchoLeak: The Zero-Click AI Exploit That Threatens Microsoft 365 Copilot Security

    A seismic shift has rippled through the cybersecurity community with the disclosure of EchoLeak, the first publicly reported "zero-click" exploit targeting a major AI tool: Microsoft 365 Copilot. Developed by AIM Security, EchoLeak exposes an unsettling truth: simply by sending a cleverly...
  10. Datacentrix Dominates Data Protection with Veeam Awards & Cloud SaaS Solutions

    Amid a swiftly evolving IT landscape where data protection and operational resilience have become paramount concerns, Datacentrix has once again distinguished itself as an innovator and leader. At the recent Veeam ProPartner Awards, Datacentrix secured two of the event’s most coveted accolades...
  11. Top Microsoft 365 Security Threats in 2025 & How to Mitigate Them

    As cyber threats targeting Microsoft 365 continue to evolve, understanding and mitigating these risks is paramount for organizations relying on this platform. The recent "Microsoft 365 Security Roundup: Top 5 Threats in 2025" summit highlighted the most pressing security challenges and provided...
  12. Top Microsoft 365 Security Threats & Essential Mitigation Strategies in 2023

    As cyber threats targeting Microsoft 365 continue to evolve, organizations must remain vigilant to protect their critical productivity tools. Recent analyses have identified several pressing security challenges that demand immediate attention. 1. Privilege Escalation Attackers often exploit...
  13. Commvault Metallic Cloud Backup Breach Highlights SaaS Security Risks & Best Practices

    As the cybersecurity landscape continues to evolve, organizations increasingly rely on software-as-a-service (SaaS) solutions for essential operations such as cloud-based data backup and disaster recovery. However, with this shift comes new and complex threats—highlighted by the US Cybersecurity...
  14. Commvault SaaS Breach Highlights Supply Chain Risks in Cloud Data Protection

    The sudden exposure of key Commvault infrastructure has ignited urgent concern among SaaS providers and cybersecurity professionals alike, highlighting an increasingly complex threat landscape for cloud-based data protection platforms. The U.S. Cybersecurity and Infrastructure Security Agency...
  15. Emerging Cyber Threats and Defenses: Supply Chain Attacks, AI Hallucinations, and Cloud Security in 2025

    As cybersecurity threats continuously evolve, last week underscored just how varied and sophisticated the modern threat landscape can be. From ingenious methods for initial compromise to the persistent challenges of AI hallucinations, the headlines and interviews offered stark reminders for the...
  16. SaaS Security Alert: Nation-State Breach Highlights Risks & Defense Strategies

    A recent surge in cyber campaigns is drawing heightened attention to the security of Software-as-a-Service (SaaS) applications, with Commvault—one of the leading enterprise data protection providers—at the center of a nation-state level breach. The U.S. Cybersecurity and Infrastructure Security...
  17. SaaS Cloud Security Alert: Protecting Service Principals as Hackers Target Commvault Azure Environment

    In a newly issued advisory, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has put multinational enterprises and IT professionals on high alert following a series of attacks specifically targeting Commvault’s Microsoft Azure-hosted environment. This warning, published just as...
  18. Commvault Cybersecurity Incidents 2025: Key Vulnerabilities & Cloud Security Strategies

    Commvault, a leading provider of data protection and information management solutions, has recently been at the center of significant cybersecurity incidents. These events have prompted advisories from the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and have raised concerns...
  19. Cyberattacks on SaaS Providers: Protecting Data and Ensuring Cloud Security

    In recent months, Commvault, a prominent data management and security firm, has been the target of sophisticated cyberattacks attributed to nation-state actors. These incidents have raised alarms within the cybersecurity community, prompting the U.S. Cybersecurity and Infrastructure Security...
  20. SaaS Cloud Security Risks Spotlighted by Commvault Azure Incident & CISA Advisory

    As new revelations surface about cloud security, the ubiquitous presence of SaaS solutions in enterprise environments is coming under renewed scrutiny. The recent warning issued by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) about potential broader attacks exploiting...