APT28 Cyber Espionage Campaign Targets Logistics and Tech Companies, CISA Warns

| | applications, ServiceNow
By Christy Lynch This post summarizes the CISA advisory issued on May 21, 2025 and offers some additional recommendations from Reveal Security based on similar and recently observed attack patterns targeting SaaS ...
Let’s Talk About SaaS Risk – Again… This Time, Louder.

Let’s Talk About SaaS Risk – Again… This Time, Louder.

| | applications
By Kevin Hanes, CEO of Reveal Security A few weeks ago, I shared a thought that sparked a lot of discussion: SaaS is not a black box we can ignore. It’s a ...
RSA 2025 Reflections: The Conversation Beneath the Noise

RSA 2025 Reflections: The Conversation Beneath the Noise

| | applications
  By Kevin Hanes, CEO at Reveal Security Like every year, RSA 2025 was a sensory overload – in the best and worst ways. The buzz of AI was everywhere. The show ...
Picture1 3

From PyPI to the Dark Marketplace: How a Malicious Package Fuels the Sale of Telegram Identities

Introduction In today’s digital era, security breaches can occur in the blink of an eye. Telegram Desktop is renowned for its secure, user-friendly messaging interface, but what if the data used to ...
zero-trust, be, ZTA, architecture, security, Permiso, applications, zero-trust, ML, AI, zero-trust, access, zero-trust, PAM, zero-trust, ZTNA, migrating, backup data, zero-trust, security, zero-trust, business, policy container zero-trust ZTNA

Permiso Launches Universal Identity Graph to Advance Zero-Trust IT

| | applications, IT, zero trust
Permiso today added a Universal Identity Graph engine that makes it simpler for cybersecurity teams to visually map the relationship between individuals, applications and systems to better enforce zero-trust IT policies ...
Security Boulevard
Sevco, Apple, DMA, EU, A green worm on a juicy red apple

Fair Ball or Foul Play?  EU’s Digital Markets Act Puts App Security on Shaky Ground

Apple Inc, announced a fightback after the EU's Digital Markets Act (DMA) allegedly forced a compromise on the security of its products ...
Security Boulevard

Why SaaS Identity Abuse is This Year’s Ransomware

By Adam Koblentz Ransomware targeting endpoints and on-premises IT infrastructure has been a primary battleground for enterprise security teams in recent years. One of the highest-profile threat actor groups in this space ...

Snowflake and the Continuing Identity Threat Detection Gap Across SaaS and Cloud

By Adam Koblentz In recent weeks, a new wide-scale identity security incident has been unfolding that is refocusing the spotlight on important questions such as: Why are account takeover, credential misuse, and ...

Watch: “Behavior Doesn’t Lie:” The Power of ML for Identity Threat Detection and Response

Traditional security controls like MFA and PAM are bypassed easily by threat actors on a regular basis. Threat actors prefer breaking into organizations using legitimate credentials so they can achieve their goals ...

Why SaaS Identity Abuse is This Year’s Ransomware

Let’s explore some of the details behind this escalating threat to SaaS applications, what may be driving it, and what you can do to better protect your SaaS footprint from these types ...