Software as a service (SaaS) providers building AI-powered applications on Amazon Bedrock AgentCore often need to serve multiple tenants with distinct security requirements from a shared infrastructure. Some tenants require cross-account access from their own Amazon Web Services (AWS) accounts, while others mandate that traffic stay within a private virtual private cloud (VPC) for regulatory…
Tag: SaaS
AI, Apps, Global Security News
AppOmni’s Marlin AI automates SaaS threat analysis, triage, and remediation at scale
AppOmni has launched Marlin AI to transform how enterprise organizations defend complex SaaS applications. Marlin AI delivers autonomous AI-powered SaaS security that leverages AppOmni’s deep SaaS application observability. It actively correlates SaaS security indicators, performs deep investigations, and guides security teams to immediate solutions. By reducing the massive hours wasted on investigating threats, alerts and…
AI, Apps, Compliance, Global Security News, Risk Management
HYCU Launches New Capability for Backup Data Use
HYCU, a SaaS data protection company, is launching aiR (AI Resilience), a new capability inside the HYCU R-Cloud platform. The new capability turns backup data into a live intelligence layer for security, compliance, and risk teams. AI Resilience solution leverages backup records to observe AI use It takes the backup records organizations have of who…
AI, Data Breaches, Endpoint, Global Security News, Network Security, Risk Management
Claude Code MCP Attack Enables Persistent Token Theft
AI coding assistants are becoming deeply integrated with enterprise SaaS platforms, but new research shows those connections may introduce hard-to-detect credential theft risks. Researchers demonstrated a MitM attack targeting Anthropic’s Claude Code that abuses MCP integrations to steal OAuth tokens and maintain persistent access to connected SaaS platforms and APIs. “AI agents used for code…
AI, Global Security News, Risk Management
Top AI-Powered Vendor Risk Management Platforms for SaaS Companies in 2026
Top AI-powered vendor risk platforms for SaaS companies in 2026, compare tools, features, and how to choose the…
AI, Apps, Compliance, Data Breaches, Global Security News, Network Security, privacy, Risk Management
Securing RAG pipelines in enterprise SaaS
In the enterprise SaaS space, AI agents are becoming an integral part of the SaaS product. To make these intelligent agents truly useful, they need contextual, customer-specific knowledge, something standard Large Language Models (LLMs), open source or otherwise, inherently lack since they are not trained on customer proprietary data. Retrieval-Augmented Generation (RAG) is the bridge…
AI, Global Security News
Glasswing Secured the Code. The Rest of Your Stack Is Still on You
Forgotten integrations, shadow IT, SaaS, and now shadow AI and agents are everywhere, and attackers don’t need sophisticated AI models to take advantage.
Global Security News, Risk Management
Claroty advances CPS security with Visibility Orchestration in xDome
Claroty has revealed new Visibility Orchestration capabilities in its Saas offering Claroty xDome, transforming visibility from a vague concept into a quantifiable measurement that proves the value of a strong CPS protection program. Visibility Orchestration elevates organizations across the industrial, healthcare, commercial, and public sectors to a high-fidelity understanding of their CPS environments, enabling measurable,…
AI, Global Security News
Phishers sneak through using GitHub and Jira’s own mail delivery infrastructure
Attackers are abusing the notification systems of SaaS platforms like GitHub and Jira to send phishing and spam emails, Cisco Talos researchers are warning. “Because the emails are dispatched from the platform’s own infrastructure, they satisfy all standard authentication requirements (SPF, DKIM, and DMARC), effectively neutralizing the primary gatekeepers of modern email security,” they note.…
Cybersecurity, Global Security News
SOC 2 Certification in Australia 2026: What Every SaaS and Cloud Business Needs to Know
In this post, I will show you a practical guide to SOC 2 certification for Australian SaaS, fintech, and cloud businesses in 2026 — Type I vs Type II, timelines, costs, and how to get certified fast. What Is SOC 2 and Why Does It Matter in 2026? SOC 2 (System and Organisation Controls 2)…
Global Security News
TeamPCP Breaches Cloud, SaaS Instances With Stolen Credentials
The threat group’s shift to speedy attacks on AWS, Azure, and SaaS instances shows organizations need to respond quickly to compromised credentials.
AI, Apps, Compliance, Cybersecurity, Global Security News, Risk Management
Reco targets AI agent blind spots with new security capability
SaaS security platform Reco has decided to address the “agent sprawl” challenge from the increased adoption of AI-driven tools by enterprises. It argues that enterprises are faced with a security situation as numerous autonomous agents now traverse multiple systems, accessing sensitive data, and executing actions without direct human oversight. To help contain this risk, the…
AI, Global Security News, Risk Management
Shadow AI is everywhere. Here’s how to find and secure it.
Shadow AI is quietly spreading across SaaS environments as employees adopt new AI tools without IT oversight. Nudge Security explains how security teams can discover AI apps, monitor usage, and govern risky AI activity. […]
GeekGuyBlog
Delinea’s StrongDM Acquisition Highlights the Changing Role of PAM
Discover how Delinea’s acquisition of StrongDM is reshaping Privileged Access Management and enhancing security in cloud environments.
AI, china, Cybersecurity, Endpoint, Exploits, Global Security News, Government & Policy, malware, Network Security, Risk Management, Russia
12 ways attackers abuse cloud services to hack your enterprise
Attackers are increasingly abusing trusted SaaS platforms, cloud infrastructure, and identity systems to blend malicious activity into legitimate enterprise traffic. Adversaries are pushing command and control (C2) through high-reputation services, including OpenAI and AWS, to blend in with normal business traffic and evade blocklists. The shift from “living off the land” to “living off the…
AI, Global Security News
Zendesk doubles down on AI with Forethought acquisition and it’s a smart play
While much of the SaaS world is tightening its belt, Zendesk is doing the opposite and honestly, it’s hard to argue with the logic.
AI, Compliance, Cybersecurity, Global Security News
Codenotary Trust delivers autonomous AI security for Linux and Kubernetes
Codenotary has announced Codenotary Trust, a unified SaaS platform that uses AI to instantly detect, prioritize, and autonomously fix security, configuration, and performance issues, while also providing rollback capabilities. Importantly, the product is designed with the talent shortage in mind so that expert-level security management is made accessible to junior and mid-level administrators. Codenotary helps…
Global Security News
How to Protect Your SaaS from Bot Attacks with SafeLine WAF
Most SaaS teams remember the day their user traffic started growing fast. Few notice the day bots started targeting them. On paper, everything looks great: more sign-ups, more sessions, more API calls. But in reality, something feels off: Sign-ups increase, but users aren’t activating. Server costs rise faster than revenue. Logs are filled with repeated…
Compliance, Europe, Global Security News, Government & Policy
Versa introduces cloud-based sovereign solution for enterprises of all sizes
Versa released Sovereign SASE-as-a-Service, a cloud-delivered SaaS offering in which the data, control, and management planes operate entirely within a region’s legal jurisdiction. Digital sovereignty has moved from a compliance consideration to a board-level decision. Across Europe and other regions, governments are asserting stronger authority over data residency and protection. The European Union’s GDPR, NIS2,…
AI, APAC, Compliance, Endpoint, Global Security News, Network Security, privacy, Risk Management
What Is a Security Data Pipeline Platform: Key Benefits for Modern SOC
Security teams are drowning in telemetry: cloud logs, endpoint events, SaaS audit trails, identity signals, and network data. Yet many programs still push everything into a SIEM, hoping detections will sort it out later. The problem is that “more data in the SIEM” doesn’t automatically translate into better detection. It often translates into chaos. Many…
AI, Apps, Endpoint, Global Security News, Network Security
Uptime Kuma: Open-source monitoring tool
Service availability monitoring remains a daily operational requirement across IT teams, SaaS providers, and internal infrastructure groups. Many environments rely on automated checks and alerting to track outages, latency issues, and service degradation across web applications and network endpoints. Uptime Kuma is an open-source uptime monitoring project that supports this type of operational monitoring through…
AI, Global Security News, Risk Management
Genetec Adds Investigation Capabilities in Security Center SaaS
Genetec, Inc. recently debuted new investigation capabilities in the Genetec Security Center SaaS to assist enterprises in faster incident resolution and to help them return to daily operations more quickly – even if investigations span multiple sites, systems, and camera vendors. Investigation experience promises efficiency in complex security environments This new investigation experience, delivered by…
Apps, Global Security News
Sophos Workspace Protection Enables Secure SaaS App Control
Easily secure access to your SaaS applications Categories: Products & Services, Workspace
AI, Apps, Compliance, Cybersecurity, Global Security News, Risk Management
SaaS isn’t dead, the market is just becoming more hybrid
Dramatic phrases like ‘Saas is dead,’ ‘SaaSpocalypse,’ and others have dominated recent discussions in the IT world. However, that narrative is premature, according to Deloitte. Yes, in 2026, established SaaS vendors will face competition from AI-native ones, the firm forecasts, but the real story is that traditional enterprise software continues to grow as it becomes…
AI, ANYRUN, Cybersecurity, Endpoint, Global Security News, malware, Risk Management
Fortune 500 Tech Enterprise Speeds up Triage and Response with ANY.RUN’s Solutions
In enterprise SaaS, unclear security decisions carry real cost. False positives disrupt customers, while missed threats expose the business. A Fortune 500 cloud provider addressed this risk by embedding ANY.RUN into SOC investigations, giving analysts the behavioral evidence needed to reduce escalations, improve triage confidence, and make proportionate response decisions at scale. Company Context and Security Scope The organization is a…
AI, Apps, Data Breaches, Endpoint, Funding, Global Security News, Network Security, Next-Gen Solutions, Risk Management, Venture
Reco Raises $30M Series B to Address AI SaaS Security Risks
Reco, a New York-based security vendor focused on AI-driven SaaS environments, has raised $30 million in Series B funding, bringing its total capital raised to $85 million. The round was led by Zeev Ventures and included participation from existing investors Insight Partners, boldstart ventures, and Angular Ventures, along with new strategic backers Workday Ventures, TIAA…