Forest Global Training Partners

Cyber Risks · Cisco Talos

Beaches and breaches

Summary: Cisco Talos' Threat Source newsletter reports that recent headlines were dominated by breaches, many but not all referencing compromised OAuth tokens linked to Salesloft's Drift integration, with a notable number of high-profile victims. The author says the reporting boiled down to two themes, supply chain and identity attacks, and argues supply chain must now include the datapath where data is processed while identity attacks increasingly target interconnected applications, not just users.

Bottom line: The compromised OAuth tokens tied to a single integration, Salesloft's Drift, reached a notable number of high-profile victims, which is the point: in a SaaS world your identity exposure extends through every interconnected application, not just your users.

Read the original at Cisco Talos ↗

Topics
Malware
Related