Turngate

So, as we are new here we wanted to introduce ourselves! If you want to know more, check out turngate.io

So how was RSAC? We bet AI was the talk of the town, and we want to discuss it too. This Tuesday @ 7:30pm we'll be talking with Peter Naudus 🐓 about Zing, a new AI coding assistant that keeps you in charge every step. Check out the GitHub below and join us Tuesday! github.com/Farmer-Pete/...

Ever curious at what Okta Support has done inside your tenant? Well here's Bruce finding out during his deep dive on Okta Threat Hunting. Next week's Don't Get Me Started will be on Wednesday @ 7pm, this time with our Jessie Jamieson, where we'll talk Data Science and Cybersecurity.

In an hour, our newest livestream of Don't Gate Me Started, this time with Okta Threat Hunting and hopefully no audio issues! www.twitch.tv/turngate

Tomorrow @ 3pm is another Don't Gate Me Started, special edition! This time around we'll be talking AI in SecOps and GRC with David Stoicescu from Rovally. Feel free to drop by to join the discussion! lnkd.in/ejhdSfup

Hey everyone, hope the Snowcrete has treated you all well. We've been keeping warm working on the latest updates for Turngate, and if you want to get a sneak peak on what's next check out our livestream happening now! www.linkedin.com/video/live/u...

On the first day of SaaSmas, my CISO gave to me: A free trial from Turngate!

Software Analyst Cyber Research has posted the first in a line of reports on how identity security is becoming one of the biggest opportunities in cybersecurity. To begin, they focus on the methodology used by cybercriminals such as Scattered Spider. softwareanalyst.substack.com/p/defending-...

At Turngate, we like to discuss best strategies and the current 'going-ons' in SaaS land. If you want to see our latest thoughts, check out our recent write up about Business Continuity and Disaster Recovery. www.linkedin.com/pulse/busine...

Every cybersecurity incident tells a story, and that narrative is written in the logs. Our latest blog will help you discern that tale and ensure you gleam actionable insights so you can make the most of your logs. www.turngate.io/blog/log-ana...

What’s in a log, or rather what’s not in a log? Bruce talks his thoughts on a recent report by Unit 42 on the use of AzureHound by threat actors, and how logs failed to showcase the full extent of the attack.

The folks at Koi discovered GlassWorm, the world's first worm targeting VS Code extensions on OpenVSX marketplace. www.koi.ai/blog/glasswo...

In case you didn't hear, F5 has reported that a "nation-state threat actor maintained long-term, persistent access to, and downloaded files from, certain F5 systems,” including source code and vulnerability info. www.helpnetsecurity.com/2025/10/15/f... F5's statement: my.f5.com/manage/s/art...

GoAnywhere MFT is warning users to install a new patch that fixes a deserialization vulnerability in the License Servlet that allows threat actors to run command injection attacks. www.techradar.com/pro/security...

When building an insider risk program, practicality is key. That is why our latest blog post lays out a middle-ground approach that is budget friendly and allows you to spot problems early with clarity, and without creating a jumbo-sized project. www.turngate.io/blog/insider...

The Google Threat Intelligence Group has published a report about the BRICKSTORM malware that has been allowing backdoor access across sectors for the last year. cloud.google.com/blog/topics/...

Good security investigations are about strategy, not spectacle. In our latest blogpost, we lay out a seven step budget- and user-friendly approach on setting up a SOC without a SIEM to make the most of your log data. www.turngate.io/blog/seven-s...

The Cloud Security Alliance announced the launch of the SaaS Security Capability Framework (SSCF), a new technical framework that defines configurable, consumable, and customer-facing security controls provided by SaaS vendors to their customers. cloudsecurityalliance.org/artifacts/sa...

If you have been wanting more information on the Salesforce Drift breach, Tom Uren breaks down the authorization sprawl attack as well as the responses from the victim organizations. www.lawfaremedia.org/article/expl...

This week Turngate hosted a mixer where we discussed current OAuth concerns. This article by Bill Batchelor, Eyal Rafian, and Nathaniel Quist expands on that with their own insights on OAuth token risks and best practices organizations can implement. unit42.paloaltonetworks.com/third-party-...

If you were affected by the Cloudflare outage last Friday, they released a blogpost this weekend detailing how a bug in the dashboard caused repeated, unnecessary calls to the Tenant Service API which ultimately overwhelmed the service. blog.cloudflare.com/deep-dive-in...

We found an interesting article about the risks associated with the growing tech debt within the SaaS world. www.techradar.com/pro/secure-a...

Hello, World!