Cybersecurity

A collection of 61 posts

Third-party

The Modern Blindspot: How Two Companies Lost 400,000 Customer Records Without Getting Hacked

Bol and De Bijenkorf just disclosed a massive breach. 400,000+ customers. Names, addresses, phone numbers, order history. Already for sale on the dark web. Here's the terrifying part: Their systems were never touched. Clean firewalls. Perfect security posture. Yet customer data walked out the back door. CEVA

Third-party

The $300B Company’s Blind Spot: How Amgen's Perfect Security Posture Became Worthless

Amgen just got breached. Patient data stolen. Proprietary research gone. Financial records exfiltrated. Material incident. SEC filing. Notification letters to patients. The world's leading biotech company with over $300 billion in market cap, world-class security teams, compliance certifications, audits, controls just got hit. Now here's the

Cybersecurity

Why Firewalls Don't Stop Modern Attacks

Your firewall is blind to breaches that start with legitimate credentials. Here's why the perimeter defense model is broken.

Cybersecurity Featured

We Read All 121 Pages of the 2026 Verizon DBIR So You Don't Have To

The 2026 Verizon DBIR Is Out. Here's What The Data Actually Says.

Third-party Featured

Oxford University Suffered Two Third-Party Data Breaches in One Term. Here Is What Actually Happened.

Oxford's own systems held. Their vendors didn't. Two third-party breaches in one academic term, and no independent detection capability in either case. A full technical breakdown.

Cybersecurity

The Crunchyroll Breach Explained: How a Vendor Login Exposed 6.8M Users

Attackers didn’t breach Crunchyroll’s systems, they logged in through a compromised vendor account. The incident highlights a growing risk: third-party access across SaaS environments.

SaaS Security

The Vendor You Trusted Just Exposed 25 Million People

A breach at Conduent exposed the data of 25 million Americans after attackers remained inside the vendor’s systems for three months.

SaaS Security

Thought you weren’t a target? ShadyPanda has been watching you for 7 years.

For nearly a decade, a malicious Chrome extension quietly collected session cookies and authenticated access from real users inside real companies. The story behind ShadyPanda highlights a growing blind spot in modern security: what happens inside authenticated SaaS sessions.

SaaS Security Featured

Why Microsoft Security Gives You Confidence, But Not the Full Story

Microsoft gives strong identity visibility, but only inside Microsoft. This explains where today’s SaaS attacks actually start.

Cybersecurity Featured

Nissan Data Breach: What Really Happened

In December, Nissan lost customer data — even though its own systems weren’t hacked. The problem came from an external platform with standing access. Read how this happened, why it keeps repeating, and what security teams should change.

SaaS Security

Your Organisation Runs on More Than Google. Your Security Should Too

Google-native companies tend to move quickly. Their teams adopt new tools early, automate workflows efficiently, and rely on the browser as the central work environment. This speed is rarely a “security issue”; it’s a modern pattern that emerges naturally when companies build on a flexible, cloud-first platform like Google

Roundtables

Cybersecurity in the Boardroom: Key Insights from the FrontierZero CISO Roundtable

Our closed-door CISO roundtable in Dubai highlighted a major shift: the perimeter is gone, and real-time identity behavior now defines effective security.

SaaS Security

What Is Context-Based Security (and Why the Old Way Doesn’t Work Anymore)

Most breaches slip through not for lack of alerts, but for lack of context. Context-based security brings clarity to chaos — helping teams focus on what’s real.

Cybersecurity Featured

One Contractor, Global Consequences: How Identity Risk Crippled Jaguar Land Rover

Jaguar Land Rover lost millions when one contractor account went unchecked. This wasn’t a system failure; it was a visibility failure. Here’s what every CISO can learn about identity risk and supply chain trust.

SaaS Security

Privilege Creep: The Hidden Backdoor Hackers Exploit in Your SaaS Environment

Privilege creep happens when users accumulate admin access over time. In SaaS environments, this creates invisible risk: inactive accounts, missing MFA, and external admins hackers love to exploit. Here's how to find and fix it before it’s too late.

Shadow IT

The Top 5 Departments Most Likely to Use Shadow IT

Discover the 5 departments most likely to introduce it into your SaaS environment.

Boardroom

Middle East Boardroom Brief: 5 Critical Data Breach Takeaways

Insights from the 2025 IBM Cost of a Data Breach Report

SaaS Security

Top 5 Takeaways for CISOs from the 2025 IBM Cost of a Data Breach Report

The latest IBM Cost of a Data Breach Report just dropped—and while headlines focus on global averages, the real insights for CISOs lie deeper. From regional cost surges to the hidden price of Shadow AI, here are five takeaways you can use to protect your organization in 2026 and beyond.

SSPM

What is SSPM and why it’s essential in 2026.

SaaS tools are the new business layer, but they’ve created a visibility gap security teams can’t ignore. This guide explains what SSPM is, why it matters, and how FrontierZero brings identity and context together to reduce risk where it matters most.

SaaS Security

How Many Users in Your SaaS Stack Don’t Actually Work There?

Orphaned SaaS accounts are the invisible risk lurking in every organization. Learn how ex-employees, contractors, and automations keep access long after offboarding — and why modern security teams are shifting to identity + context to shut it down.

ITDR

What Is ITDR, and Why It’s Essential for Securing SaaS in 2025

SaaS has changed the identity perimeter. In this guide, we break down what ITDR means, why legacy tools miss SaaS threats, and how to catch ghost access.

News

🏆 FrontierZero Named “Rising Star in Cyber Defence 2025” at CSC Awards

FrontierZero—founded in the UAE and built for modern SaaS security—has just been named Rising Star in Cyber Defence 2025. Here's what it means and what’s next.

SaaS Security

The Shocking Cost of Insider Risk in 2025—and What You Can Do About It

Insider risk now costs organizations $17.4 million a year—and most of it isn’t caused by malicious actors. In this blog, we break down why insider incidents are rising, what’s fueling them, and how to reduce exposure with identity-aware visibility.

Shadow IT

Shadow IT Isn’t a Threat. It’s a Map.

Shadow IT is no longer a minor inconvenience—it’s one of the biggest hidden risks in your organization. From unsanctioned AI tools to invisible SaaS adoption, attackers follow the same paths your employees create. Here’s how to uncover the map before they do.

SaaS Security

The Hidden Risks of SaaS Supply Chain Attacks, And How to Stay Ahead

SaaS supply chain attacks are on the rise—and most security teams aren’t ready. From OAuth abuse to shadow integrations, this post breaks down where the real risk hides and how visibility helps you stay secure.