AO Labs
-
A Technical Analysis and Lessons From The Recent Service Now Misconfiguration Risks
Learn more about the ServiceNow updates to mitigate ACL misconfiguration risks and how to avoid regressing your organization’s data security posture moving…
-
Claiming Zoom Rooms Service Accounts to Gain Access to Zoom Tenants
Learn how Zoom Rooms service accounts could have been misused to gain unauthorized access to Zoom tenants and potentially disclose sensitive information.
-
Admin Account Takeover Leads to Full SSO Compromise During AO Labs Research
Discover how AO Labs achieved read/write access of over 200K users & staff on a leading service provider’s Okta instance.
-
Salesforce Misuse of Platform Cache Leads to Widespread Data Exposure
Learn how Salesforce Platform Cache misuse is causing information disclosure in over 80% of implementations handling sensitive data.
-
The SaaS Security Future: 3 Ways LLMs are Revolutionizing SaaS
Learn how LLMs can enhance SaaS security solutions and potentially enable better anomaly detection.
-
AO Labs Notes An Over 300% Increase in SaaS Attacks
Learn about the significant upward trend in threat activity on Salesforce Community Sites targeting customer-side misconfigurations.
-
Unpacking (and Preventing) the CircleCI Data Breach
One compromised employee laptop spawned the CircleCI data breach. Learn the measures to take to secure your SaaS data and platforms.
-
Privileged Identity Management (PIM)
Learn how to ensure the bare minimum of privileged access is granted to the right people, at the right time, and for…
-
Okta PassBleed Risks – A Technical Overview
Get a detailed and technical look at the Okta PassBleed risks related to password stealing and user impersonation.
-
Payroll Fraud: Analyzing the Attack Lifecycle of a Direct Deposit Scam
Can you identify signals available in audit logs to detect payroll fraud? Learn how to support threat hunting & detection efforts.