Wing Security

SaaS misconfigurations can lead to massive data breaches. One of the most common misconfigurations seen by our Threat Intelligence Team is high-level #IAM permissions provided to customer service agents. Read our step-by-step account of how that led to MGM Resorts breach in September 2023. https://lnkd.in/gXtAy2_s

🚨𝗧𝘄𝗼 𝗔𝗰𝗰𝗼𝘂𝗻𝘁𝘀, 𝗠𝗮𝘀𝘀𝗶𝘃𝗲 𝗕𝗿𝗲𝗮𝗰𝗵 - 𝟳𝟳,𝟬𝟬𝟬 𝗰𝘂𝘀𝘁𝗼𝗺𝗲𝗿𝘀 𝗣𝗜𝗜 𝗲𝘅𝗽𝗼𝘀𝗲𝗱🚨 Fidelity Investments confirmed that a data breach in August 2024 compromised the personal information of over 77,000 customers. The breach resulted from unauthorized access to Fidelity’s systems using two recently established customer accounts. While the company detected and terminated the unauthorized access, sensitive personal data was exposed, including social security numbers and driver's licenses. 𝗙𝗶𝗱𝗲𝗹𝗶𝘁𝘆 𝗰𝗹𝗮𝗿𝗶𝗳𝗶𝗲𝗱 𝘁𝗵𝗮𝘁 𝗻𝗼 𝗰𝘂𝘀𝘁𝗼𝗺𝗲𝗿 𝗮𝗰𝗰𝗼𝘂𝗻𝘁𝘀 𝗼𝗿 𝗳𝘂𝗻𝗱𝘀 𝘄𝗲𝗿𝗲 𝗱𝗶𝗿𝗲𝗰𝘁𝗹𝘆 𝗮𝗳𝗳𝗲𝗰𝘁𝗲𝗱, but it has not disclosed how two accounts led to broader data exposure. 🧑💻 𝗪𝗶𝗻𝗴’𝘀 𝗥𝗲𝗰𝗼𝗺𝗺𝗲𝗻𝗱𝗮𝘁𝗶𝗼𝗻𝘀: Alert users to ensure they haven't received notifications from Fidelity as affected customers, and encourage proactive account monitoring to detect suspicious activity. Learn more -> https://tcrn.ch/3YlbNND 👉 𝗜𝗺𝗽𝗼𝗿𝘁𝗮𝗻𝘁 𝘁𝗼 𝗻𝗼𝘁𝗲 - Back in March 2024, Fidelity announced another data breach that occurred through a third-party provider affecting approximately 28,000 individuals. That breach compromised personal information including SSNs, bank accounts, routing numbers, and credit card numbers. Unlike third-party breaches, this time, Fidelity Investments was compromised directly. https://bit.ly/4eERqkh #SaaSSecurity #DataBreach #CyberSecurity #SSPM

Stop by and see us at Innovate Cybersecurity to discuss #SaaSSecurity #SSPM

SaaS usage is critical for businesses, but it also creates potential security risks. Some of the common risks and how to mitigate them. https://lnkd.in/gpbbVaXt

Going to #innovatecybersecurity24? Come see why SaaS security is becoming an emerging attack vector for hackers and why you need to protect your organization today. We are offering a FREE SaaS security risk assessment - Completely tailored to you and your SaaS environment. Ran Senderovitz Galit Lubetzky Jack Blumenthal

💡 Do you have a strategy for handling the next SaaS security threat before it strikes? SaaS apps are at the heart of your business, but they come with risks that are constantly evolving. Relying on traditional security methods just won’t cut it anymore. OUT ❌ Research threats ❌ Filter the relevant ones ❌ Assess the impact of potential attacks ❌ Integrate huge amounts of details IN ✅ Real-time contextual threat intelligence. Check out this article in The Hacker News by our very own Galit Lubetzky CEO of Wing. She dives into a crucial part of cybersecurity - threat intelligence, and how SaaS threat intelligence provides the very much-needed context for security teams to act before it’s too late. Read the article here 👉 https://bit.ly/3ZpT8kZ #threatintelligence #SSPM #SaaSSecurity #Cybersecurity

🚨Why you shouldn’t connect your work account to personal apps🚨 Transport for London (TfL) recently confirmed that their customers were impacted by a cyber-attack that originated in early September, affecting around 5000 individuals. The compromised data is mostly related to Oyster refund data. Breached data includes bank account numbers, sort codes, names, email addresses, and home addresses. TfL responded by suspending some services, including Oyster and Zip credit card applications. Tube arrival data remains unavailable. The transport network is still running normally despite the breach. As a precaution, TfL is contacting customers and checking IT identities. 🧑💻 Wing’s Recommendations: Advise employees not to use their work accounts to access their personal apps. Also, ensure your organization has threat intelligence capabilities to stay ahead of SaaS data breaches. Read more -> https://lnkd.in/eJ4yiHki #SaaSSecurity #DataBreach #CyberSecurity

Another data breach highlighting the need for SaaS security. Learn about the recent Fortinet data breach and how you can protect yourself from something like that happening to you. https://lnkd.in/gZDbnPPq

There's no doubt about it. When it comes to staying protected against SaaS threats, SSPM continues to deliver. Wing makes SaaS security easier than ever. #SSPM #SaaaSSecurity #SaaS

🚀 Big News: We’ve Launched SaaS Pulse! 🚀 We are excited to announce SaaS Pulse—our free tool that gives organizations continuous insights into their SaaS security. SaaS Pulse makes it easy to treat SaaS risk management as an ongoing practice, not just an occasional check-up. It’s designed to help security teams quickly uncover critical risks like misconfigurations, offboarding issues, and access risks—all in one simple dashboard. Plus, you get real-time threat intelligence and a dynamic security health score. Best of all? It’s free to use 👉 https://lnkd.in/dff5e8H4 #SaaS #CyberSecurity #SaaSSecurity