The Kaseya 2026 SaaS Security Report highlights critical vulnerabilities in cloud environments. A major concern is the rise of unmanaged guest accounts which now outnumber licensed users, providing expanded attack surfaces for credential-based attacks. Furthermore, OAuth integrations allow third-party applications to maintain persistent access even after passwords are changed, while low MFA enforcement leaves many accounts vulnerable to phishing and theft. The report also notes that external file sharing creates long-term data exposure risks and attackers increasingly use trusted infrastructure like VPNs to hide their activities from detection.
* Proliferation of unmanaged guest accounts
* Persistent access through OAuth integrations
* Widespread lack of MFA enforcement in SaaS environments
* Ongoing data exposure via orphaned file-sharing links
* Difficulty detecting malicious logins using trusted IP addresses
* Proliferation of unmanaged guest accounts
* Persistent access through OAuth integrations
* Widespread lack of MFA enforcement in SaaS environments
* Ongoing data exposure via orphaned file-sharing links
* Difficulty detecting malicious logins using trusted IP addresses
US crosswalk buttons were hijacked to play AI-generated voices of prominent figures like Bezos, Musk, and Zuckerberg. The hack exploited a default password (1234) on Polara's Field Service app, which allowed unauthorized configuration of the crosswalk signals.
Open source generative AI models can be downloaded for free, used at scale without racking up API call costs, and run securely behind corporate firewalls. But don’t let your guard down. Risks still exist and some aren’t only magnified, but new ones specific to gen AI are emerging.
