In this episode of Cybersecurity Today, host Jim Love delves into the topic of SaaS (Software as a Service) security. Sharing his early experiences promoting SaaS, Jim elaborates on its inevitable rise due to cost-effectiveness and shared development resources. The episode highlights security concerns with SaaS, such as shadow IT and weak access control, especially in the face of an influx of AI software. Jim introduces Yoni Shohet, CEO and Co-founder of Valence Security, who discusses the SaaS security landscape, focusing on the independent 'State of SaaS Security' report by the Cloud Security Alliance. Yoni outlines the importance of monitoring API tokens, ensuring proper configurations, and the challenges posed by non-human identities. The discussion underscores the evolving nature of SaaS security, encouraging stronger collaboration between security teams and business units to manage risks effectively.

00:00 Introduction to SaaS Security
00:01 The Evolution and Benefits of SaaS
01:33 Challenges and Security Concerns with SaaS
02:08 Introduction to the State of SaaS Security Report
02:34 Interview with Yoni Shohet: Background and Experience
03:06 Yoni Shohet's Journey in Cybersecurity
08:33 The Rise of SaaS Security Issues
14:03 Key Findings from the SaaS Security Report
17:32 The Importance of SaaS Security Measures
21:36 Managing SaaS Security in Organizations
33:43 Valence Security's Approach to SaaS Security
36:59 Conclusion and Final Thoughts

In this episode of Cybersecurity Today, host David Shipley discusses the FBI's report on cybercrime losses in 2024, which reached a record $16.6 billion, marking a 33% increase from the previous year. The report highlights major types of cyber crimes such as phishing, spoofing, extortion, and investment fraud, with older adults being significantly impacted. Additionally, Blue Shield of California experienced a data breach affecting 4.7 million members due to a Google Analytics misconfiguration. The episode also covers global ransomware trends, revealing that 86% of affected firms paid ransoms, and the Verizon Data Breach Investigation Report's findings that ransomware is a factor in nearly half of all cyber incidents. David also previews upcoming cybersecurity events and hints at further discussions on phishing training and data security.

00:00 Record Cybercrime Losses in 2024
04:07 Blue Shield of California Data Breach
07:03 Ransomware Crisis and Global Impact
08:23 Verizon Data Breach Report Insights
09:20 Upcoming Events and Closing Remarks

In this episode of 'Cybersecurity Today,' host Jim Love discusses various pressing topics in the realm of cybersecurity. Highlights include Anthropic's prediction on AI-powered virtual employees and their potential security risks, Microsoft’s introduction of AI security agents to mitigate workforce gaps and analyst burnout, and a pivotal court ruling allowing a data privacy class action against Shopify to proceed in California. Additionally, the show covers the last-minute extension of funding for the Common Vulnerabilities and Exposures (CVE) program by the US Cybersecurity and Infrastructure Security Agency, averting a potential crisis in cybersecurity coordination. These discussions underscore the evolving challenges and solutions within the cybersecurity landscape.

00:00 Introduction and Overview
00:26 AI Employees: Opportunities and Risks
01:48 Microsoft's AI Security Agents
03:58 Shopify's Legal Battle Over Data Privacy
05:12 CVE Program's Funding Crisis Averted
07:24 Conclusion and Contact Information