Survey reveals insecurity increase in Software-as-a-Service (SaaS) market

Share post:

A survey conducted by CSA and Adaptive Shield revealed an increase in the amount of security incidents within the Software-as-a-Service (SaaS) market.

According to data, over the last two years, more than 1,000 security experts have experienced SaaS-related vulnerabilities, with 55% of them having such events. These problems include data leaks, dangerous third-party apps, data breaches, and SaaS ransomware assaults.

The underlying source of this increase in security incidents appears to be inadequate application of current security measures. As a result, rules and procedures to address issues about misconfigurations, third-party app management, secure access, identity management, threat detection, and data loss prevention are being established.

The survey also reveals the ineffectiveness of typical security processes in safeguarding SaaS settings, such as Cloud Access Security Brokers (CASBs) and manual audits. Modern SaaS systems’ complexity and specialized requirements have outgrown the capability of CASBs and human labor. Tasks like managing multiple user identities, securing various configurations, and authenticating several third-party programs need a large amount of human effort and time.

Organizations are emphasizing SaaS security in response to the shifting threat landscape. According to the findings of the survey, there has been a major shift in the responsibilities of executive-level professionals, notably Chief Information Security Officers (CISOs) and security managers. They are shifting from controllers to governors of the SaaS ecosystem, taking on security responsibilities.

The sources for this piece include an article in TheHackerNews.

SUBSCRIBE NOW

Related articles

Hashtag Trending for World Password Day, Thursday, May 2nd, 2024

Security firm Okta warns of an unprecendented password stuffing attack that is piggybacking on regular user’s mobile and...

Google Chrome’s new post-quantum cryptography causes connection issues

The latest update to Google Chrome, version 124, which integrates a new quantum-resistant encryption mechanism, has led to...

UK legislation bans weak passwords

Starting Monday, the UK will enforce new laws banning the sale of devices with weak default passwords such...

Massive Credential Stuffing attack exploits home devices

Okta, a leading authentication service, is raising alarms over a massive credential-stuffing attack that cleverly disguises fraudulent login...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways