Skip to content
Threat Feed
Subscribe

Tag

Saas-Security

3 briefs RSS
high advisory

Autonomous AI Agents Pose New Supply Chain and Data Exfiltration Risks

This content introduces AI Detection and Response (AIDR) as a new cybersecurity category to address emerging threats from autonomous AI agents, including supply chain attacks and unintended data sharing, highlighting their ability to execute with inherited privileges across endpoints, SaaS, and cloud environments.

ClawHub +42 ai agentic-ai aidr supply-chain-attack data-exfiltration cloud-security endpoint-security saas-security
4t 16i updated
high advisory

Klue Security Incident Leads to Recorded Future Salesforce Data Compromise

A third-party marketing vendor, Klue, experienced unauthorized access to its integration layer, which connects to other SaaS platforms like Salesforce, leading to the compromise of an OAuth token and subsequent unauthorized access to Recorded Future's Salesforce account, where business data fields including customer contact names, email addresses, and potentially business contract information were accessed.

Klue +1 data-breach supply-chain cloud-security saas-security oauth
3t
high advisory

Google Workspace Admin Role Assigned to a User or Group

Adversaries leverage the assignment of administrative roles within Google Workspace to an existing or new user/group, establishing persistence and escalating privileges to gain broad control over the tenant, including bypassing single sign-on.

Google Workspace cloud-security google-workspace persistence privilege-escalation account-manipulation saas-security
2r 2t