EP148 Decoding SaaS Security: Demystifying Breaches, Vulnerabilities, and Vendor Responsibilities
Nov 12, 2023•30 min•Season 1Ep. 148
Episode description
Guest:
-
Adrian Sanabria, Director of Valence Threat Labs at Valence Security, ex-analyst
Topics:
-
When people talk about “cloud security” they often forget SaaS, what should be the structured approach to using SaaS securely or securing SaaS?
-
What are the incidents telling us about the realistic threats to SaaS tools?
-
Is the Microsoft 365 breach a SaaS breach, a cloud breach or something else?
-
Do we really need CVEs for SaaS vulnerabilities?
-
What are the least understood aspects of securing SaaS?
-
What do you tell the organizations who assume that “SaaS vendor takes care of all SaaS security”?
-
Isn’t CASB the answer to all SaaS security issues? We also have SSPM now too? Do we really need more tools?
Resources:
For the best experience, listen in Metacast app for iOS or Android
Open in Metacast