Tag: SaaS security
Anonymous guest access let one actor mine SaaS portals for 17 months
Reco tracks a long-running campaign harvesting records from over-permissioned SaaS portals.
Extortion crew UNC6671 leans on personal mobiles in SaaS raids
Google ties a vishing wave against finance and legal firms to UNC6671, which calls staff on personal phones.
Udemy Data Breach: ShinyHunters Claims Compromise of 1.4 Million User Records
The ShinyHunters extortion group claims to have breached Udemy’s systems, stealing 1.4 million records containing PII and internal corporate data.…