Obsidian Security launches new SaaS supply chain protection

Per Silicon Angle, Obsidian Security Inc. has unveiled a new suite of capabilities designed to secure the software-as-a-service (SaaS) supply chain, aiming to provide end-to-end protection for integrations between cloud-based applications.

The new offering addresses the growing risks associated with interconnected SaaS environments and autonomous AI agents, which have become prime targets for attackers due to blind spots in traditional security tools. Obsidian's solution focuses on three key areas: visibility into SaaS-to-SaaS integration risks, early breach detection, and rapid incident containment. It utilizes a knowledge graph to normalize identity and activity data across various SaaS platforms, enabling near-real-time detection of anomalies in OAuth scopes, API behavior, and user activity.

The system also identifies and addresses unauthorized "shadow integrations" and the unique challenges posed by AI agents that can move autonomously across applications, increasing the attack surface. Obsidian's approach highlights the architectural separation of SaaS-to-SaaS security from traditional controls like endpoint and network security.

Source: Silicon Angle