Beaches and breaches

Sept. 12, 2025, 8:49 a.m.

Description

Recent cybersecurity news has shifted focus from AI and ransomware to breaches, particularly those involving compromised OAuth tokens linked to Salesloft's Drift integration. The main themes emerging are supply chain and identity attacks, with a need to redefine these concepts in the context of SaaS environments. Supply chain attacks now extend beyond hardware and software to include the datapath, while identity attacks increasingly target interconnected applications. The article emphasizes the importance of broadening cybersecurity focus and introduces the Cyber Threat Intelligence Capability Maturity Model (CTI-CMM) as a framework for organizations to assess and enhance their cyber threat intelligence programs.

Date

  • Created: Sept. 12, 2025, 12:05 a.m.
  • Published: Sept. 12, 2025, 12:05 a.m.
  • Modified: Sept. 12, 2025, 8:49 a.m.

Attack Patterns

  • Nefilim
  • MegaCortex - S0576
  • LockerGoga - S0372