THE SHADOW AI PROBLEM: HOW SAAS APPS ARE QUIETLY ENABLING MASSIVE BREACHES

Summary from the TLDR InfoSec newsletter

A Grip Security analysis of 23,000 SaaS environments found every one of them runs embedded AI, with public SaaS attacks up 490% year-over-year and 80% of incidents exposing PII or customer data. The 2025 Salesloft Drift breach shows the blast radius: attackers stole OAuth tokens and used them to access 700+ organizations, including Cloudflare and Palo Alto Networks. Companies average 140 AI-enabled SaaS environments, most of which are installed without a security review.