You're listening to the Cyberwire Network, powered by N2K.

Krogel is AI built for the enterprise SOC.

Fully private, schema-free, and capable of running in sensitive air-gapped environments.

Krogel autonomously investigates thousands of alerts weekly, correlating insights across your tools

without data leaving your perimeter.

Designed for high availability across geographies, it delivers context-aware, auditable decisions

aligned to your workflows.

Krogel empowers analysts to act faster and focus on critical threats,

replacing repetitive triage with intelligent automation

to help your SOC operate at scale with precision and control.

Learn more at Krogel.com.

That's C-R-O-G-L.com.

Hello, everyone, and welcome to the CyberWires Research Saturday. I'm Dave Bittner, and this is our weekly conversation with researchers and analysts

tracking down the threats and vulnerabilities,

solving some of the hard problems and protecting ourselves in our rapidly evolving cyberspace.

Thanks for joining us.

If an application is vulnerable to this abuse, basically if I know a legitimate user's email address that uses that CS application, there's a way I can set that email address

in my own sort of attacker, enter a tenant,

and then authenticate essentially into the SaaS application, you know, as the legitimate user.

So, you know, whether you want to call it spoofing or impersonation, right,

the end result is I'm in that SaaS application as that user and have access to, you know,

whatever they would have access to in that application.

...