<ul><li>CISA warns about the recent breach at Commvault that could potentially put many Software-as-a-Service (SaaS) providers at risk.</li><li>State-sponsored attackers are abusing a zero-day vulnerability in Commvault Web Server to target SaaS companies, as confirmed by Commvault and Microsoft.</li><li>CISA advises Commvault's customers to patch their systems and follow mitigations to minimize the risk of unauthorized access to client environments.</li><li>A large-scale campaign targeting various SaaS companies' cloud applications with default configurations and elevated permissions is currently ongoing, according to CISA.</li></ul>

Commvault attack may put SaaS companies across the world at risk, CISA warns

Discover more