PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

UK retail cyber-attacks a ‘wake-up call’, SaaS overreliance ‘creating single points of failure’, calls for global regulatory alignment – OffSec roundup for CISOs

yeswehack.com | blog | #ransomware | #cve | #ciso | #regulation | #saas-security | #uk-retail
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CISO roundup: NCSC calls UK retail attacks a wake-up call; JPMorganChase's CISO warns SaaS overreliance creates single points of failure; the CVE database is rescued; regulatory alignment urged.
Published
Collected

Related coverage

blog · yeswehack.com
EU Cyber Resilience Act: Manufacturers face 24-hour deadline to report actively exploited vulnerabilities
The EU CRA's vulnerability reporting rules took effect on 11 Sept 2026: makers of digital products must report actively exploited vulnerabilities within 24h, facing fines up to EUR 15M.
blog · portswigger.net
PHP2Shell x Burp Suite: Detection in your hands within a day of disclosure
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) became the latest vulnerability to grab headlines around the globe. By some estimates, up to 70% of websites run at least some PHP. So if you're respons
blog · bishopfox.com
Small Actions, Big Breaches: The Silent Offensive Against Your data
New report data: 45% of employees use gen-AI tools, 77% paste data into them, 82% of those pastes come from personal accounts, and ~40% of uploaded files hold sensitive data like PII.
blog · bishopfox.com
SaaS Threats are Escalating: A Follow-Up to Our Recent Analysis
SaaS threat update: UNC6040 (ShinyHunters/Scattered Spider) runs credential attacks and OAuth phishing; suspected nation-state UNC6395 spread beyond Salesloft to 700+ customers.
blog · bishopfox.com
State of the SaaS Security Union
AppOmni CTO Brian Soby on two active SaaS threats: UNC6040 ransoms stolen Salesforce data; UNC6395 breached Salesloft Drift and hit 700+ customers, harvesting secrets for Workspace, M365, and AWS.
blog · bishopfox.com
Building Security at Scale: The AppExchange Story
The AppExchange origin story: Salesforce's 2007 trust bet, the first Chief Trust Officer, reviews evolving into automated security tooling, and economics that let thousands of developers sell in.
Back