Attackers Are Abusing Virtual Private Servers to Compromise SaaS Accounts — Here’s How They Do It and How to Stop Them
If you’ve ever relied on IP reputation, geofencing, or “trusted locations” to protect your SaaS stack, this one’s for you. Darktrace researchers recently uncovered a coordinated wave of SaaS account compromises coming from virtual private server (VPS) providers. The logins looked clean. The IPs were new. The timing mimicked real users. And once attackers got…