News

Vanta admits it introduced a bug in its codeThe bug resulted in a small subset of customers having data exposedThe error is being fixed, and affected customers notifiedSecurity and compliance automation company Vanta has confirmed sharing sensitive customer data with other customers by mistake.In a statement (via TechCrunch), the company said a change it had made in the code resulted in a security breach. In it, some sensitive data from a small subset of customers was shared with other customers.The incident was spotted on May 26, and remediation efforts are currently underway, with the process set to finish by June 4.Hundreds of victimsAs a result of the incident, “a subset of data from fewer than 20% of our third-party integrations” was exposed to other Vanta customers, the company’s chief product officer Jeremy Epling said.He added that fewer than 4% of Vanta customers have been affected, and they have already been notified.Since the company has more than 10,000 customers, that would put the breach at up to 400. At the same time, the data breach notification letter Vanta sent out says that the data typically includes employee names, roles, and information about different tools, such as 2FA. The company did not confirm exactly what type of data was grabbed.Vanta is a security and compliance automation platform that helps businesses achieve and maintain certifications like SOC 2, ISO 27001, HIPAA, and GDPR more efficiently through continuous monitoring and integrations.Among its customers are Atlassian, Omni Hotels, Quora, and ZoomInfo.You might also likeIranian hackers pose as journalists to push backdoor malwareTake a look at our guide to the best authenticator appWe've rounded up the best password managers

Would you trust AI tools to secure your most sensitive data and workflows in SaaS apps? Or allow it to integrate with your SOC tools? Welcome to the new wave of agentic-driven SaaS security.SaaS apps are the backbone of business operations. But they’ve also become one of the most under-protected parts of the enterprise attack surface. The rapid adoption of platforms like Microsoft 365, Salesforce, and ServiceNow has made managing risk and complexity significantly more difficult for organizations.Traditional security tools haven’t kept upTraditional security tools haven’t kept up. Most were built for networks and endpoints, not for the fluid, API-driven, user-centric nature of SaaS. Cybersecurity teams are overwhelmed with alerts, logs, and sprawling permission models. Can AI help them?Generative AI (or GenAI) can automate and streamline many parts of the security workflow, but its real value comes from enhancing the capabilities of human cyber analysts. In SaaS environments, where visibility is fragmented and telemetry is overwhelming, GenAI brings speed, scale, and contextual understanding that humans alone can’t achieve in real time.Here’s how and why GenAI is becoming indispensable for SaaS security.1.Scaling Security Operations Without Scaling HeadcountSaaS ecosystems grow rapidly, often beyond what security teams can track. Every new app, user, and integration adds risk.GenAI enables organizations to scale by:Automating alert triage and enrichmentRecommending remediation stepsAnd streamlining investigation workflows. This reduces analyst fatigue and lets teams focus on strategic, high-value tasks.Instead of drowning in logs, security teams can focus on strategic analysis and incident response. GenAI acts as a force multiplier, freeing up human analysts for deeper work.2.Silencing the Noise and Prioritizing Real ThreatsThe average security operations center (SOC) deals with tens of thousands of alerts daily. Most of these are noise, but buried within are the handful of events that actually matter. GenAI helps cut through the fog.By analyzing data across multiple SaaS tools and ingesting telemetry in real time, GenAI can:Identify behavioral anomalies fasterHighlight privilege escalation attempts or lateral movementAnd correlate user activity with known threat indicators.This isn’t just automated alerting. It’s contextual decision support, which helps analysts zero-in on what truly matters for their organization, not just what happened.3.GenAI Turns Security Teams Into SaaS ExpertsSaaS platforms are like conveyor belts in a high-speed factory.At first, everything runs clean and smooth. But over time, more integrations, add-ons, custom workflows, and user roles get added. Each one is like a new package being dropped onto the belt. As the belt moves faster, representing rapid innovation and business needs, these add-ons get reconfigured and repackaged through frequent updates.New features are deployed, old ones deprecated, and access controls shift to match evolving use cases. From the outside, it all looks seamless. But underneath, the belt is overloaded and accelerating. Without continuous inspection, it’s easy for a broken piece, a mislabel, or an unsecured package to slip by, introducing risk downstream.SaaS platforms are nuanced, and each has its own ecosystem of roles, permissions, APIs, and configuration nuances. Imagine being tasked with inspecting this conveyor belt in real time; flagging faulty components, tracking changes, and ensuring nothing dangerous makes it into the final product. Most security teams don't have the luxury of having a deep expert on every SaaS platform in their stack.That’s where GenAI comes in. It fills that gap by:Acting as a domain-specific tutor for security analystsOffering contextual guidance on specific SaaS configurationsMapping risks based on real-time configuration and activity dataAnd automatically triaging and prioritizing threats and configuration vulnerabilities.Like an intelligent scanner that watches the entire belt, GenAI understands what’s normal, and instantly flags anything suspicious before it causes a data exposure or a breach.4.Enhancing Security Analysis with SIEM and SOAR ToolsCan GenAI integrate seamlessly with SIEM, SOAR, and data lake tools? Yes it can. GenAI can provide comprehensive analysis of incidents across cloud, SaaS, and endpoint data sources.Instead of users having to manually piece together information from various alerts and logs, GenAI can automatically analyze the data and provide a coherent, prioritized summary of the situation. GenAI can correlate data across different sources (threat detection, identities, configurations, policies, etc.) to provide more comprehensive and contextualized insights.It can also proactively analyze the data, identify high-risk issues, and provide detailed investigation and remediation plans. This allows security and IT teams to be more proactive instead of reactive, as the AI can surface and triage the most critical issues without the user having to manually search through all the data.Reducing effortLastly, by automating the correlation, contextualization, and initial triage of security alerts and findings, GenAI can significantly reduce the manual effort required by security teams.This allows security practitioners to focus on the most critical issues and higher-level analysis, rather than getting bogged down in the time-consuming task of data sifting.This allows GenAI to become the "first line user" of the security tools, automating many of the initial triage and investigation steps.GenAI brings four key advantages to SIEM, SOAR, and data lake tools:Reduces false positives by understanding context across systemsSpeeds up investigations by summarizing cross-platform eventsReduces manual effort by threat hunting and investigating proactively from their SOC tools to include data from the SaaS domain or similarAnd enhancing investigations by integrating expert, SaaS-aware AI agents into SOC tools.Now, what are the considerations for organizations in utilizing GenAI for SaaS security?SOCs Must Evolve to Detect AI-Empowered ThreatsIt’s not just defenders using GenAI. Attackers are too. Threat actors now use AI to craft spear-phishing (or whale-ing) messages, clone voices for social engineering, and generate synthetic data to evade detection.SaaS is a soft target in this new paradigm. SOCs and threat hunters must adapt by:Detecting subtle, low-noise, AI-assisted attacksInvestigating identity misuse and session hijacking with AI-powered forensicsAnd using GenAI to surface anomalies invisible to traditional detection tools.As adversaries up their game with GenAI, defenders must do the same or fall behind.GenAI Must Be Secured Like Any SaaS ToolGenAI itself is typically SaaS based or is embedded in SaaS applications. With AI-enabled apps becoming common, the risk of inadvertent data loss that cannot be clawed back or malicious data theft is a concern for corporations. GenAI data governance and securing integrations between solutions with embedded AI is important to meet compliance and data sovereignty requirements.The more GenAI is integrated into the security workflow, the more access it has to sensitive data. That makes GenAI itself a high-value target.Security leaders must:Treat GenAI platforms as sensitive SaaS apps with proper access controlsDemand transparency from GenAI providers on model training data, subprocessor use, and retention policiesAnd evaluate models not just on performance, but also on their security posture.The biggest risk in GenAI is assuming it’s safe by default. AI risk is “blind risk” or invisible until it causes serious damage.Security First, Everything Else SecondThe flood of new GenAI models and tools creates real pressure to chase shiny new objects. But switching between AI solution providers without a clear security review process can expose organizations to data leakage or compliance failures.Organizations should prioritize:Providers with strong model isolation and data governance controlsTools that meet the organization’s existing SaaS security guidelinesAnd fit-for-purpose models aligned to the intended use case (e.g., writing, analysis, summarization).Performance, cost, and latency are all important. But none outweigh the need for security.GenAI Is the Future of SaaS DefenseThe convergence of SaaS adoption and GenAI innovation marks a pivotal moment for cybersecurity. As attackers become more sophisticated, and SaaS environments more complex, security teams must embrace the power of GenAI. It's no longer just about staying competitive; staying secure is now on the line.The next generation of security operations will not be run solely by humans or AI, but by a partnership between the two. GenAI is not just a tool, but an incredible security multiplier.We've compiled a list of the best time management apps.This article was produced as part of TechRadarPro's Expert Insights channel where we feature the best and brightest minds in the technology industry today. The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/news/submit-your-story-to-techradar-pro

Microsoft Copilot study claims major timesaving and productivity gains across UK government20,000 civil servants gained access to Copilot, with striking resultsTimesaving amounted to around two weeks per person per yearUsing AI tools such as Microsoft Copilot could help civil servants save weeks of work over the course of a year, new government research has claimed.The UK government had 20,000 civil servants across 12 different organizations use Microsoft Copilot over the course of several months, using the service to draft documents, take meeting notes, search internal information, and even personalize recommendations to unemployed job seeker benefits claimants.The study claimed to find major productivity and efficiency boosts from using Copilot, with the workers saving on average between 19 and 24 minutes per day — amounting to around two weeks per person per year.Copilot timesavingThe study, which took place over September 30 to December 31 2024, says these savings were the equivalent of giving a full year back to 1,130 people, allowing them to focus on higher-value tasks rather than admin-based work.“These findings show that AI isn’t just a future promise – it’s a present reality," commented Technology Secretary Peter Kyle.“Whether it’s helping draft documents, preparing lesson plans, or cutting down on routine admin, AI tools are saving civil servants time every day. That means we can focus more on delivering faster, more personalised support where it really counts."The study also signified the largest deployment of Microsoft Copilot in UK government to date, with workers utilizing the platform across the likes of Word, Excel, PowerPoint, Outlook, and Teams."AI is the most transformative technology of our time and we’re already seeing its potential to reshape public service delivery," noted Darren Hardman, CEO, Microsoft UK.“This could unlock new levels of growth, efficiency, and innovation for the country. The Government’s Microsoft 365 Copilot experiment shows what’s possible when people are empowered with the right tools: 26 mins per day (almost 2 weeks per year) less time on admin, more time delivering what matters. And the really exciting part is, this is just the beginning.”You might also likeThese are the best online collaboration tools for workersMost workers are greatly overestimating their AI skillsOver half of UK businesses who replaced workers with AI regret their decision

DLC and two player support is coming to Elden Ring NightreignThis was confirmed by FromSoftware in a recent social media postThe studio also revealed that the game has sold more than 3.5 million units Elden Ring Nightreign developer FromSoftware has confirmed that the game will receive a two-player mode later this year.The news comes from a recent post by the studio's Japanese-language X / Twitter account, which also revealed that the game had sold more than 3.5 million units."The total number of copies shipped worldwide for Elden Ring Nightreign has exceeded 3.5 million. Thank you to everyone who has been playing," the post, which we have machine translated, read."We will continue to provide post-launch support, including DLC ​​scheduled for release this year, as well as adding a two player mode," it continued.The news of an incoming two player mode will likely come as a great relief for some. Currently, Elden Ring Nightreign only supports matches of one or three players. This unusual number makes it a little tricky to team up with friends, as you need get two people who own the game online and ready to play at the same time.When you factor in the lack of cross-platform matchmaking, it can really limit your ability to play when you want to.The announcement of some downloadable content (DLC) is significant too. Given the online nature of the game, it seems fair to expect that it will receive a number of updates and additions in the following weeks and months.Finally, the post concluded by stating that "we plan to release enhanced versions of the existing 'Kings of the Night' from this month onwards, so we hope you will continue to enjoy the game."It's a little unclear what this means, though it will likely be an updated version of some of the game's existing bosses.If you're keen on trying the game before this new content arrives, Elden Ring Nightreign is available now for PC, PlayStation 5, PlayStation 4, Xbox Series X and Series S, and Xbox One.You might also like...Tom Clancy's The Division 2 developers explain why the Battle for Brooklyn DLC is the perfect starting point for new playersNo, you shouldn't peel off the Nintendo Switch 2 screen's protective layerRoboCop: Rogue City - Unfinished Business is more of the same, but that’s not a bad thing