What is Token Theft? OAuth, Session & API Token Attacks Explained

What is API Security? Protecting the Hidden Layer Between SaaS Apps

What is Account Takeover? ATO Attacks Explained

What Are Refresh Tokens and How to Use Them Securely

What are OAuth Tokens? How It Works, and Its Vulnerabilities

Refresh Token Security: Best Practices for OAuth Token Protection

SSO Bypass: How Attackers Circumvent Single Sign-On

OAuth Vulnerabilities Every Security Team Should Know

OAuth Scopes: Permissions & Security Best Practices

MFA Bypass: Attack Techniques and Defense Strategies

OAuth Security: How to Secure OAuth Integrations

Access Token vs Refresh Token: Key Differences Explained

When MCP Meets OAuth: Common Pitfalls Leading to One-Click Account Takeover

What Are Non-Human Identities? NHI Security Explained

What is Lateral Movement in SaaS Security?

MFA Bypass Explained: Why Traditional Auth Fails & Prevention Tips

Small Tools, Big Risk: When Browser Extensions Start Stealing API Keys

Obsidian Security for the modern SaaS Supply Chain

The new attack surface: OAuth Token Abuse

The rise of SaaS Supply Chain attacks: Why you aren’t safe from the next Salesloft-Drift attack

CVE-2025-34291: Critical Account Takeover and RCE Vulnerability in the Langflow AI Agent & Workflow Platform

Obsidian Security Announces Integration with Microsoft Sentinel to Bolster Enterprise SaaS Security

Understanding every layer of your SaaS Supply Chain Security: From VRMs to OAuths

Legacy Security vs. Obsidian: Why SaaS Security Demands a New Approach

Closing the SaaS Security Coverage Gap

How the Obsidian Community SDK and Connectors, Unified Knowledge Graph, and AI Assistant close the gap in SaaS security coverage and intelligence

From SaaS Sprawl to a Knowledge Graph

From noise to clarity: Accelerate your SaaS security operations with Obsidian AI Assistant

A Look Inside: SaaS Security Workflows that Scale

An Open Letter to the SaaS Industry: Make Security the Default

Building an AI Agent Security Framework for Enterprise-Scale AI

AI Red Teaming Services: How Enterprises Validate AI Resilience

Cybersecurity for AI: Integrating AI Protection Into SaaS Defense

The Top AI Pentesting Tools for LLMs and Autonomous Agents

AI Security Testing: Protecting Models and Agents From Adversarial Exploits

AI Red Teaming: How Enterprises Test and Harden Their AI Systems

AI Penetration Testing: Finding and Fixing AI Weaknesses

AI Security Automation: Reducing Human Error and Speeding Response

AI Detection and Response: Extending SaaS XDR to Agentic Systems

AI Agent Protection: Safeguarding Identities, Access, and Behavior

Real-Time AI Agent Monitoring: Detecting Threats Before They Escalate

What Is AISPM? Defining the Future of AI Posture Management

AI Security Posture Management: Continuous Protection for AI Agents

Inside the AI Risk Repository: Mapping the Threat Landscape

The AISPM Market Guide: Navigating AI Security Posture Management

AI Safety Benchmarks: How to Evaluate and Certify Secure Models

AI Model Governance: Establishing Accountability and Oversight

What the OWASP AI Security Guidance Means for Enterprise Teams

AI Risk Mitigation: Turning Compliance Into Continuous Protection

Bridging the Gap Between AI Security and Governance

What Is AI Governance? Definitions, Frameworks, and Tools for 2025

How to Build Compliance Into AI Security Risk Management

Understanding AI Regulations: From GDPR to Global Oversight

AI Exploits and Model Compromise: How Attackers Target the AI Supply Chain

Adversarial Prompt Engineering: The Dark Art of Manipulating LLMs

Securing Generative AI Applications Against Modern Threats

GenAI Security Risks: Understanding Emerging Attack Vectors

The Top AI Security Risks Facing Enterprises in 2025

Adversarial Machine Learning: Understanding and Preventing Model Exploitation

AI Data Poisoning: How Corrupted Data Undermines Trust in Agents

Top AI Agent Security Risks and How to Mitigate Them

The 2025 AI Agent Security Landscape: Players, Trends, and Risks

Prompt Injection Attacks: The Most Common AI Exploit in 2025

AI Guardrails: Enforcing Safety Without Slowing Innovation

AI Application Security: Safeguarding Data, Code, and Behavior

Cybersecurity in AI: Bridging SaaS Protection and Intelligent Systems

AI Security Best Practices: Building a Foundation for Responsible Innovation

From Agentic AI to Autonomous Risk: Why Security Must Evolve

Security for AI Agents: Protecting Intelligent Systems in 2025

What Is AI Agent Security? Understanding the Foundation of Secure Autonomy

What Is LLM Security? How Large Models Introduce Enterprise Risk

Obsidian Security Unifies Security Insights for Databricks and Delta Sharing to Accelerate AI

From well-known to Well-Pwned: Common Vulnerabilities in AI Agents

Behind the Breach: Scattered Spider SaaS Attack Analysis & MITRE ATT&CK Mapping

What Is Agentic AI? A Guide to Autonomous Agents in the Enterprise

How to Choose a SaaS and AI Security Vendor for Enterprise Scale

AI Agents Are Rewriting SaaS Security. Are You Ready?

BREAKING: UNC6395 – The Biggest SaaS Breach of 2025

ShinyHunters and Scattered Spider: A Merger of Chaos in the 2025 Salesforce Attacks

From DNS Takeover to Org Admin: Secondary Attacks on Atlassian Cloud

The Hunt for Malicious Browser Extensions: What Security Teams Need to Know

Solving Insider Risk in the Age of SaaS and AI

SaaS Security Shared Responsibility Model: Who’s Responsible for SaaS Security?

Shadow AI Risks: How ChatGPT’s New Features Threaten Enterprise Data Security

Recent Trends In Advanced SaaS TTPs

OneDrive Security Risks: Microsoft Grants Full Access to Third-Party Apps

Behind the Shield: Cracking the Limits of Okta FastPass

Salesforce Misconfiguration Continues to Expose Links to the Public

How to Build an Ethical AI Framework

Lessons Learned from the DeepSeek Cyber Attack

Identity Threat Prevention: Email Security vs In-Browser Detections

How Do Attackers Bypass Email Security?

What Are Adversary-in-the-Middle (AiTM) Attacks?

Shadow SaaS Discovery: Email Scanning vs. In-Browser Monitoring

Why Shadow AI and Unauthorized GenAI Tools Are a Growing Security Risk

What Is Shadow SaaS?

Defeat Fake CAPTCHA Attacks from the Source

2025 NYDFS Deadlines Expose SaaS Security Gaps—How to Avoid Paying Millions in Fines

Demystifying Okta AiTM

Ten Tactics for Introverts in Open Office Plans

Obsidian Security Customer Alert on Risky AI Assistant Clawdbot

Get breach clarity across SaaS

Stop SaaS account takeover before attackers steal your data

Prevent excessive privilege and public data exposure across SaaS

Stop direct logins bypassing SSO

Secure your SaaS supply chain end-to-end

Secure shadow AI without slowing innovation

Secure shadow SaaS across the enterprise

Secure your AI agent workflows

Obsidian Security Customer Alert on Malicious Chrome Extension

Secure Your SaaS Supply Chain

Secure Your SaaS Integrations End to End with Obsidian

2025 Breach Landscape: Inside the Year of the Cyberattack

SaaS Security Guidance: Improve Your Security Posture While Connectors Are Built

Obsidian Security Customer Alert on Salesforce-Gainsight Data Breach

Anthropic AI Used by Nation-State Hackers to Automate and Scale Cyberattacks

Extend Your SaaS Security Coverage: Introducing Obsidian Community SDK

Boost your security team’s productivity with Obsidian AI Assistant

Join the SaaS Security Standards Program

Boost your security team’s productivity with Obsidian AI Assistant

Secure and Govern AI Agents in SaaS

Automaker Giant Stellantis Breached in SaaS Supply Chain Attack

Secure AI Agent Access to Your SaaS Data

Your Ultimate Readiness Guide to Secure AI Agents

Comprehensive Generative AI Security Checklist

Lessons from a CISO: How to Take Control Over Your Organization's AI Usage

ShinyHunters Breach Workday in Latest Salesforce Attack

Allianz Life Salesforce Data Breach: Scattered Spider & ShinyHunters Attack

143,000 Claude, Copilot, ChatGPT Chats Publicly Accessible. Were You Exposed?

UNC6040 Breaches SaaS Apps at Google and Other Major Companies

Grok API Key Leak Exposes xAI Models to Major Security Risks

ServiceNow Vulnerability Exposes Sensitive Data to Unauthorized Users

2025 NYDFS Cybersecurity Compliance Checklist

Malicious Browser Extensions Infect 2.3 Million Users

Scattered Spider Now Targeting Airlines and Transportation, FBI Warns of Imminent Data Theft

A Complete SSPM Guide: 6 Steps to SaaS Security Posture Success

SaaS Security Posture Management (SSPM) Checklist 2026

16 Billion Passwords Leaked Online in Record Data Breach

UNC6040 Vishing Campaigns Targets Salesforce for Data Theft

Secure Your Browser-Based Workplace

SaaS Security Insights from the Frontlines

Obsidian Security vs Proofpoint

Obsidian Security vs Abnormal

Security Where You Need It Most

Prevent and Detect Threats to Your Slack Environment with Obsidian Security

Taming The Unknown: SaaS Security Challenges

Obsidian Security’s SaaS Security Threat Report 2025

Free Risk Assessment for Microsoft 365

Obsidian Security Available on the AWS Marketplace

Demo vereinbaren

Start Your Journey to Safer SaaS Today With A Customized Risk Assessment

How to Secure Saas Against Emerging Threats

5 Ways Attackers are Targeting Your SaaS Identities

Lessons Learned from the Microsoft Breach by Midnight Blizzard

Session Hijacking and Zero-Day Exploits

How Sigma Computing Secures SaaS

Breaking Down SaaS Security Posture Management (SSPM)

The Elements of Comprehensive SaaS Security

Zero Trust Security for SaaS Applications

Identify and Mitigate SaaS Session Hijacking

Prevent OAuth Abuse in the SaaS Environment

How Databricks Customers Can Protect Their Data with Obsidian Security

Cloud-first Snowflake Secures SaaS with Obsidian

SSPM The Obsidian Way

CISO Tradecraft Podcast: SSPM with Ben Johnson

What is SSPM?

What is SaaS Security?

BigCommerce Enhances SaaS Threat Detection With Obsidian

How to Secure Your Snowflake Environment

SaaS Backdoors: The Risks of OAuth Integrations

SaaS Check-Up: Strategies for Combating SaaS Threats

How NIS2 and DORA Impact SaaS Compliance

Identity Threat Detection & Response (ITDR) Plus: Stop Every Attack Targeting Your SaaS

SaaS Security Posture Management (SSPM) Plus: Eliminate Risk Across Your SaaS Attack Surface

Achieve Continuous Compliance in SaaS

SaaS Incident Response

The Three Pillars of SaaS Security

Techniques of SaaS Compromise

Third-Party SaaS Integration Risk

The Obsidian Security Platform: Total Protection for Your SaaS Applications

Shadow SaaS Management: Stop Unfederated Apps from Bringing Unwanted Risk to Your Organization

Identity Threat Prevention: Stop SaaS Threats Before They Impact Your Business

How to Build an Effective SaaS Security Strategy

Behind the Breach: Malicious Attack on Cyberhaven’s Chrome Extension Developer Team

Obsidian Security for SaaS Compliance

It’s Time to Rethink SaaS Security

What is SaaS Security Posture Management (SSPM)?

SSPM Bigger Picture—Posture Management, Shadow SaaS, and Integrations

SSPM for Regulated Industries–Streamlining SaaS Compliance

Preventing SaaS Spear Phishing–A Comprehensive Defense Strategy

Uncovering Blind Spots in Your SaaS Security Ecosystem

Obsidian Security Announces End-to-End SaaS Supply Chain Protection as Agentic AI Adoption Accelerates

Obsidian Security Ranked Among the Fastest-Growing Companies in North America on the 2025 Deloitte Technology Fast 500™

Obsidian Closes the SaaS Security Coverage and Intelligence Gap Amid Expanding Attack Surface

Obsidian Security Unveils AI Agent Defense to Secure SaaS Data Access

Obsidian Security Expands Go-to-Market Leadership Team to Scale SaaS Protection in the Age of AI

Obsidian Security Launches Shadow SaaS, AI App Management and Threat Prevention Capabilities Built for Mid-Sized Enterprises

Obsidian Security Taps New Chief Product Officer, Veteran Cybersecurity Product Leaders To Lead Charge Ahead Of New Saas Challenges Posed By Agentic AI

Obsidian Security Partners with SentinelOne to Deliver Unified Threat Protection Across Endpoint and SaaS

Ex-Cylance Tech Chief Starts New Company

Obsidian Appoints Data Ethicist Laura Norén as VP of Privacy & Trust

Obsidian Makes the CNBC 2019 Upstart 100 List

Top 10 Finalist in RSAC Innovation Sandbox Contest

Obsidian Partners with Snowflake to Consolidate Security Visibility at Scale

Obsidian Launches Zoom Protection to Accelerate Secure Business Adoption of Video Communication

Why Data Ethics Is a Growing CISO Priority

How Businesses Can Protect Their SaaS: Cloud Security Tips From a Former NSA Agent

Cloud Detection and Response Vendor Obsidian Launches First Channel Program to Support 100% Channel Commitment

Obsidian Announces New Partner Program with 100 Percent Channel Commitment

Trump’s WeChat and TikTok App Store Bans Are a Cybersecurity Nightmare

Obsidian Delivers Industry-First Continuous Security Solution for Workday

US Agencies, Companies Secure Networks After Huge Hack

Hackers Used Obscure Texas IT Vendor to Attack U.S. Agencies

Obsidian Cloud Detection and Response Now Available in AWS Marketplace

Want To Win? Create The Right Early GTM Strategy.

Obsidian Security Releases Industry-First SaaS Session Hijacking Detection Feature to Protect Today’s Cloud-First Organizations

Obsidian Security Hires Industry-Leader Xinran Wang as New EVP of Engineering

Obsidian Security Lands $90M to Detect and Fix Major SaaS Risks

Obsidian Security Raises $90 Million Series C Round to Cement its Leadership in SaaS Security

Obsidian Security Names Reena Choudhry as Chief Revenue Officer

Obsidian Security Launches EMEA CIO Advisory Board and Partnership with NORMA Cyber to Build Upon Accelerating Traction in the EMEA Market

Obsidian Security Receives 2022 Cloud Computing Security Excellence Award

Obsidian Security Unveils Next-Gen SaaS Security Posture Management (SSPM) Solution

Obsidian Launches New SaaS Security and Compliance Tools

The Gap in SaaS Security – Techstrong TV

Obsidian Solidifies Market Leadership Position, Expanding Posture Hardening Support to 11 New Applications

Cyber Essentialism & ‘Doing Less With Less’

0mega Ransomware Gang Changes Tactics

SaaS Ransomware Attack Hit Sharepoint Online Without Using a Compromised Endpoint

Obsidian Security Now Available for Purchase on the CrowdStrike Marketplace

Obsidian Security Recognized as Strong Performer by Independent Research Firm

Obsidian Security Now Available on the Google Cloud Marketplace

Obsidian Security Partners with Databricks to Bolster SaaS Data Governance

Sunil Seshadri, Former Global CISO of Wells Fargo, Joins Board of Directors at Obsidian Security

Obsidian Security Expands in Australia to Protect Critical SaaS Applications for Organisations Across the Region

Obsidian Security Announces New Integration with CrowdStrike Falcon® Next-Gen SIEM to Accelerate SaaS Threat Detection and Response

Obsidian Security Launches New Australian Data Centre Built on AWS to Strengthen Customer Data Sovereignty

Obsidian Security Expands in Germany to Protect Critical SaaS Applications for Organizations Across the Region

Obsidian Security Strengthens Public Sector Credentials with IRAP Assessment

Obsidian Security Advances Security Capabilities for AI Data Cloud

Obsidian Security’s German Data Center, Built on AWS, Strengthens European Customer Data Sovereignty

Obsidian Security Launches 2025 SaaS Security Threat Report

Secure your Workday environment with SaaS Security from Obsidian Security.

Secure Snowflake data, roles, and integrations with Obsidian Security

Secure ServiceNow integrations, permissions & KB widgets with Obsidian Security

Protect your Salesforce environment from SaaS Supply Chain Threats with Obsidian Security

Secure Okta MFA, admin access and app integrations with Obsidian Security

Secure your Microsoft 365 environment with Obsidian Security

Secure Google Workspace access, apps, and files with Obsidian Security

Secure your GitHub environment with Obsidian Security

SaaS Security Integration for Databricks: Control access, monitor risk, automate compliance

SaaS Security Integration for Custom connect: Gain visibility, Monitor risk, Enforce compliance

SaaS Security for Zuora

SaaS Security for Zoom

SaaS Security for Zscaler Private Access

SaaS Security for SentinelOne

SaaS Security for Zoho CRM

SaaS Security for Webex

SaaS Security for Smartsheet

SaaS Security for Wiz

SaaS Security for Zendesk

SaaS Security for Tines

SaaS Security for Versa Concerto

SaaS Security for SailPoint

SaaS Security for Tableau

SaaS Security for SuccessFactors

SaaS Security for Sharefile

SaaS Security for Slack Enterprise

SaaS Security for N8n

SaaS Security for Postman

SaaS Security for SendGrid

SaaS Security for Salesforce Commerce Cloud B2C

SaaS Security for Salesforce Marketing Cloud

SaaS Security for PagerDuty

SaaS Security for Ping Federate

SaaS Security for Ping

SaaS Security for Oracle Fusion HCM

SaaS Security for Onelogin

SaaS Security for Mulesoft

SaaS Security for Notion

SaaS Security for Monday.com

SaaS Security for MongoDB Atlas

SaaS Security for Microsoft Graph - Entra ID

SaaS Security for Microsoft - PowerShell Access

SaaS Security for HubSpot

SaaS Security for Miro

SaaS Security for Logz

SaaS Security for Microsoft Power Platform

SaaS Security for LastPass

SaaS Security for Meraki

SaaS Security for LaunchDarkly

SaaS Security for Kintone

SaaS Security for Juniper Mist

SaaS Security for Greenhouse Recruiting

SaaS Security for JumpCloud

SaaS Security for GitLab

SaaS Security for Jamf

SaaS Security for Fireblocks

SaaS Security for Insightly

SaaS Security for GitHub Posture

SaaS Security for Fastly

SaaS Security for DocuSign

SaaS Security for Dialpad

SaaS Security for Fabric

SaaS Security for Datadog

SaaS Security for Drata

SaaS Security for Duo

SaaS Security for Dropbox

SaaS Security for Asana

SaaS Security for CrowdStrike

SaaS Security for Cloudflare

SaaS Security for Cradlepoint

SaaS Security for Clockify

SaaS Security for ClickUp

SaaS Security for Auth0

SaaS Security for Box

SaaS Security for Airtable

SaaS Security for Adobe Marketo Engage

SaaS Security for Artifactory

SaaS Security for Slack

SaaS Security for Arista

SaaS Security for Adobe Acrobat Sign

SaaS Security for Aha

SaaS Security for Oracle Fusion Apps

SaaS Security for Azure DevOps

SaaS Security for Add to Microsoft Power Platform

SaaS Security for GitHub

SaaS Security for 1Password

SaaS Security for ZScaler

SaaS Security for Atlassian

Void Arachne (Silver Fox APT) Targets Taiwanese Government & Tech Firms in Spear‑Phishing‑Driven Espionage Campaign

UNC2452 Targets Government IT Supply Chain in Supply‑Chain Espionage Campaign

APT34 (OilRig / Helix Kitten) Targets Middle Eastern Government Email Infrastructure via Power Exchange Server Backdoor

BlindEagle (APT‑C‑36) Targets Latin American Entities in Spear‑Phishing‑Driven Espionage Campaign

Scattered Spider Targets Airlines & Retail in Social‑Engineering‑Driven Cyberattack

APT28 (Fancy Bear) Russian Military Intelligence Targets Western Logistics Supporting Ukraine

APT41 (Barium / Salt Typhoon)Targets Telecom Providers via Kernel‑Level Backdoor Espionage Campaign

APT29 (Cozy Bear/Midnight Blizzard) Targets Diplomatic IT via Token‑Theft‑Driven Espionage Campaign

APT32 (OceanLotus) Targets Dissidents & Corporate Media via Fake‑Site‑Driven Espionage Campaign

APT33 (Elfin Team) Targets Aerospace & Energy Firms via Spear‑Phishing‑Driven Espionage Campaign

Optimizing SaaS Security: Trade Me's Path to Cloud-First Growth

BigCommerce Enhances SaaS Threat Detection With Obsidian

Leading Finserv Company Stops Phishing Threats and Unauthorized AI

Upwork Enables Remote Work, Protecting Against Internal and External Threats

Snowflake Embraces SaaS Security To Unlock the Power of Data