[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:saas-security-posture":3},{"control":4,"products":25,"stories":47,"lessons":91,"related":116,"compare":137},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.","Monitoring of settings, sharing, user permissions and connected third-party apps in your SaaS platforms, with alerts on risky changes and data exposure.","Some of the largest data thefts of recent years came through SaaS platforms: stolen tokens of connected apps, public sharing links and support accounts with too much access. SSPM gives the security team a view of systems that business units usually run themselves.",[11,12,13,14],"Which SaaS platforms does it support?","Does it monitor the OAuth apps and integrations connected to our tenants?","Can it detect unusual data exports or API use?","Who in the business gets the findings, and can they fix them themselves?","Risk: data theft from SaaS platforms through misconfiguration or compromised integrations. Control: SSPM on core SaaS tenants with review of connected apps. Owner: business applications lead. Measure: high-risk connected apps without approval.",[17,18,19,20],"NIS2 Art. 21(2)(d): supply chain security","DORA Art. 28: ICT third-party risk","CIS Control 4: secure configuration","ISO\u002FIEC 27001:2022 A.5.23: information security for use of cloud services",{"name":22,"slug":23},"Configuration Management","configuration-management","2026-10-16T12:48:10.584124+00:00",[26,32,40],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":27,"product_name":28,"url":30,"description":31},"appomni","AppOmni","\u002Fvendor-logos\u002Fappomni.png","https:\u002F\u002Fappomni.com\u002F","SaaS security posture management for platforms such as Salesforce, Microsoft 365 and ServiceNow.",{"vendor_slug":33,"vendor_name":34,"vendor_logo":35,"product_slug":36,"product_name":37,"url":38,"description":39},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-shield","Falcon Shield","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Ffalcon-shield\u002F","SaaS security posture management, from CrowdStrike's acquisition of Adaptive Shield.",{"vendor_slug":41,"vendor_name":42,"vendor_logo":43,"product_slug":44,"product_name":42,"url":45,"description":46},"obsidian-security","Obsidian Security","\u002Fvendor-logos\u002Fobsidian-security.png","obsidian","https:\u002F\u002Fwww.obsidiansecurity.com\u002F","SaaS posture management and detection of account and integration compromise.",{"total":48,"last_days":49,"recent":50},88,27,[51,56,61,66,71,76,81,86],{"slug":52,"title":53,"published_at":54,"brief":55},"87-say-their-ai-controls-need-to-work-better-5ec784","87% say their AI controls need to work better","2026-11-06T06:00:03+00:00","Most companies lack adequate AI controls, leading to security and compliance risks.",{"slug":57,"title":58,"published_at":59,"brief":60},"companies-are-spending-more-on-ai-governance-and-getting-less-control-f3a356","Companies are spending more on AI governance and getting less control","2026-11-05T05:30:14+00:00","Companies increase AI governance spending but struggle to maintain control over AI tool usage.",{"slug":62,"title":63,"published_at":64,"brief":65},"radio-with-no-radar-why-agent-runtime-security-fails-without-the-layers-beneath-6cb037","Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It","2026-11-04T11:34:20+00:00","AI agent security fails without visibility into underlying systems, as seen in a mass-email incident.",{"slug":67,"title":68,"published_at":69,"brief":70},"hundreds-of-mundane-ai-apps-are-hiding-sexually-abusive-deepfake-features-7f7db7","Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features","2026-11-02T10:00:00+00:00","Hundreds of AI apps disguised as benign tools secretly generate abusive deepfake content.",{"slug":72,"title":73,"published_at":74,"brief":75},"microsoft-365-accounts-compromised-at-79-organizations-no-passwords-needed-d00a5f","Microsoft 365 accounts compromised at 79 organizations, no passwords needed","2026-10-23T11:45:12+00:00","Microsoft 365 accounts compromised via session token replay, bypassing MFA at 79 organizations.",{"slug":77,"title":78,"published_at":79,"brief":80},"ai-driven-large-scale-nation-state-campaign-using-artex-enables-supply-chain-com-f111d3","AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise","2026-10-21T18:23:55+00:00","China-aligned Storm-0940 uses AI framework ARTEX for rapid supply chain attacks.",{"slug":82,"title":83,"published_at":84,"brief":85},"from-email-to-case-to-the-boardroom-how-inherited-agents-break-governance-built-8674d7","From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software","2026-10-19T11:50:00+00:00","Salesforce Agentforce has a vulnerability that can expose sensitive data through chained features.",{"slug":87,"title":88,"published_at":89,"brief":90},"datatilsynet-norway-20-03541-37-2b19d2","Datatilsynet (Norway) - 20\u002F03541-37","2026-10-13T13:41:47+00:00","Norway DPA fines Xandr €8.5M for processing Grindr users' sexual orientation data without valid consent in real-time",[92,96,100,104,108,112],{"slug":93,"title":94,"published_at":95},"87-of-organizations-admit-ai-governance-controls-are-falling-short","87% of Organizations Admit AI Governance Controls Are Falling Short","2026-11-06T07:20:41.565+00:00",{"slug":97,"title":98,"published_at":99},"ai-tool-sprawl-exposes-gap-between-governance-spending-and-actual-control","AI Tool Sprawl Exposes Gap Between Governance Spending and Actual Control","2026-11-05T06:20:24.63+00:00",{"slug":101,"title":102,"published_at":103},"ai-agent-blind-spots-why-runtime-security-alone-leaves-organizations-exposed","AI Agent Blind Spots: Why Runtime Security Alone Leaves Organizations Exposed","2026-11-04T13:23:12.771+00:00",{"slug":105,"title":106,"published_at":107},"disguised-ai-apps-secretly-generate-deepfake-abuse-content","Disguised AI Apps Secretly Generate Deepfake Abuse Content","2026-11-02T11:22:39.3+00:00",{"slug":109,"title":110,"published_at":111},"session-token-hijacking-bypasses-mfa-at-79-organizations","Session Token Hijacking Bypasses MFA at 79 Organizations","2026-10-23T16:21:49.013+00:00",{"slug":113,"title":114,"published_at":115},"ai-powered-nation-state-actor-automates-supply-chain-compromise-in-hours","AI-Powered Nation-State Actor Automates Supply Chain Compromise in Hours","2026-10-21T20:21:53.714+00:00",[117,121,125,129,133],{"slug":118,"name":119,"problem":120},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",{"slug":122,"name":123,"problem":124},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",{"slug":126,"name":127,"problem":128},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":130,"name":131,"problem":132},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",{"slug":134,"name":135,"problem":136},"email-authentication","Email authentication (DMARC)","Nobody can send email that pretends to come from your domain.",{"obsidian-security\u002Fobsidian":138,"appomni\u002Fappomni":147,"crowdstrike\u002Ffalcon-shield":153},{"hq_country":139,"also_provides":140,"reviews":141,"affected":145,"reported":146},"US",[],[142],{"label":143,"url":144},"Gartner Peer Insights: Obsidian user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fobsidian",0,1,{"hq_country":139,"also_provides":148,"reviews":149,"affected":145,"reported":145},[],[150],{"label":151,"url":152},"Gartner Peer Insights: AppOmni SaaS Security Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fappomni-saas-security-platform",{"hq_country":139,"also_provides":154,"reviews":155,"affected":168,"reported":169},[],[156,159,162,165],{"label":157,"url":158},"SE Labs enterprise endpoint test Apr-Jun 2026: CrowdStrike Falcon","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-crowdstrike-falcon-2026-07-factsheet.pdf",{"label":160,"url":161},"AV-Comparatives EPR test 2025: CrowdStrike Falcon Enterprise","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2025\u002F09\u002FEPR_CrowdStrike_2025.pdf",{"label":163,"url":164},"Gartner Peer Insights: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcrowdstrike-falcon",{"label":166,"url":167},"PeerSpot: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcrowdstrike-falcon-reviews",4,23]