Tag: saas-security

When Integrations Become an Attack Path: Hardening Salesforce OAuth After the Klue Incident

pr0h0•June 21, 2026

A practical analysis of the Klue breach shows how a compromised Salesforce OAuth integration can expose CRM data and what teams should do to harden connected apps, tokens, and access controls.

salesforceoauth-securitysaas-security

Auditing OAuth Integrations After the Icarus Group’s Breach of Klue

pr0h0•June 20, 2026

A technical breakdown of the Klue OAuth breach, including how the Icarus Group attack unfolded, what systems were affected, and how developers should audit third-party integrations.

oauthcybersecuritysaas-security

Testing for vm2 Sandbox Bypasses: What to Look for in User-Run Script Features

pr0h0•May 7, 2026

Recent vm2 critical vulnerabilities, including CVE-2026-26956, highlight how user-run JavaScript features in SaaS apps can turn sandbox escapes into host-level code execution risks.

vm2sandbox-escapejavascript-security