Blog
-
Claiming Zoom Rooms Service Accounts to Gain Access to Zoom Tenants
Learn how Zoom Rooms service accounts could have been misused to gain unauthorized access to Zoom tenants and potentially disclose sensitive information.
-
Okta Breach Threat Intel Advisory
Learn more about recent IdP attacks, like the Okta compromises that impacted many Okta customers, and how AppOmni helps secure SaaS identities.
-
Handling SaaS Data Exposure Risks Due to Potential ServiceNow Misconfigurations
Customer-side SaaS app misconfigurations—recently found in a ServiceNow instance—can include over-permissioned end user roles and data exposure.
-
Detecting and Preventing Okta Compromises with SSPM
An SSPM solution can detect identity-centric attacks that occurred on Okta admin accounts and prevent sophisticated TTPs from being successful.
-
Introducing the SaaS Event Maturity Matrix (EMM)
Learn about the Threat Detection framework for assessing SaaS audit logging from different SaaS platforms commonly used by enterprises.
-
Perceptions, SaaS Identities and AI
Learn 3 key takeaways from Black Hat 2023 on cybersecurity perceptions, SaaS identities, and securing AI and LLMs.
-
Admin Account Takeover Leads to Full SSO Compromise During AO Labs Research
Discover how AO Labs achieved read/write access of over 200K users & staff on a leading service provider’s Okta instance.
-
MOVEit Compromise Underscores the Importance of Continuous SaaS Security Monitoring
Learn mitigation steps against a critical zero-day vulnerability in MOVEit Transfer software, affecting hundreds of organizations including government agencies.
-
Product Update: Discover Unmonitored SaaS Applications via Identity Providers
See how AppOmni’s June 2023 product update provides unprecedented observability into your SaaS estate by discovering SaaS apps connected through identity providers.
-
Salesforce Misuse of Platform Cache Leads to Widespread Data Exposure
Learn how Salesforce Platform Cache misuse is causing information disclosure in over 80% of implementations handling sensitive data.
