Breaking down the biggest SaaS security risks of the last year

ChannelBuzz.ca

Benjamin Jones, operations director for SaaS Alerts (left) and Chip Buck, co-founder and chief Technology Officer of SaaS Alerts (right)

SaaS and cloud-based apps are key to businesses of any size, and the proliferation of apps outside of the data centre presents unique challenges to MSPs managing their clients’ infrastructures. In this edition of the podcast, we take a look at the threatscape for SaaS apps, as defined by SaaS Alerts’ annual SASI Report.

We’re joined by Chip Buck, co-founder and chief Technology Officer of SaaS Alerts, and Benjamin Jones, operations director for SaaS Alerts, to discuss the findings of the company’s annual SaaS Application Security Insights report, diving deep on many aspects of the SaaS security scene.

We discuss:

• details on the purpose and role of the SASI Report;
• the shift away from password spraying towards more targeted attacks like token harvesting and man-in-the-middle attacks;
• surprises in the data gathered in terms of geographical origin points of attacks;
• the rise of phishing-as-a-service;
• the risks around guest accounts for SaaS apps;
• the benefits and risks of using OAuth;
• managing the balance between collaboration and security;
• managing alert fatigue and recognizing the right alerts at the right time;
• some of the biggest or most attacks that SaaS Alerts blocked over the course of last year;
• a spike in the number of critical alerts coming from Slack;
• other major applications that are reporting more alerts than ever;
• what MSPs should be focused on and thinking about in front of their customers;
• how MSPs can maximize their profitability;
• flying-under-the-radar security gaps that deserve more attention;
• why attack dwelling times inside the network are on the rise; and
• one thing every MSP leader should do right now.

All this and much more are in this edition of the ChannelBuzz.ca Podcast.

You can find the results of the 2025 SaaS Application Security Insights Report here.