Cloud & SaaS Security

2 pieces in Cloud & SaaS Security.

Article 4 MIN

React2Shell and the Question 'Where Do We Run This?'

December 11, 2025 Ines Carvalho Cloud & SaaS Security

A maximum-severity flaw in React Server Components was exploited within hours of disclosure. The patch was straightforward. Finding every affected application across cloud accounts, hosting platforms and vendor products was not.

Article 3 MIN

The Integration Token Nobody Was Watching

September 04, 2025 Mateo Lindqvist Cloud & SaaS Security

Attackers used OAuth tokens from a sales chat integration to export CRM data from hundreds of organizations, then searched it for more credentials. Most victims had strong login security. The tokens went around it.