The secure enterprise browser extension for the AI era. Combining browser telemetry and autonomous agents to stop advanced advanced attacks and secure AI usage.
- Tweets 307
- Following 71
- Followers 732
- Likes 100
Push Security just won Best Secure Enterprise Browser @TheHackersNews Cybersecurity Stars Awards! Deploy in minutes.
Any browser. Real-time protection. No migration.
awards.thehackernews.com/win…
1
8
7,462
Push Security has been named to @Redpoint’s 2026 InfraRed 100 🎉
Honored to be recognized among the companies shaping the future of cloud infrastructure and AI as we build the most powerful AI-native security tool in the browser. Read the full report: redpoint.com/infrared/report…
1
110
With Push, you get an OS and browser agnostic way to manage and remove browser extensions. With our latest feature, you can now also automatically block known-bad extensions from running in your environment.
Read our guide to securing browser extensions hubs.li/Q045MP4-0
1
177
The next evolution of ClickFix is here: InstallFix.
Attackers distribute cloned Claude Code websites via malicious search ads. The pages contain fake instructions that trick victims into installing infostealer malware instead.
Read the breakdown
hubs.li/Q045TM6F0
1
1
204
Most breaches now start in the cloud — no malware needed.
Attackers exploit legit functionality, dump data, and demand ransom. The common thread? It all happens in the browser.
See how these attacks work in the wild 👉hubs.li/Q045KBZv0
143
ClickFix, FileFix & related browser attacks are up 517% in 6 months. Push now detects ClickFix, FileFix, and other browser-based attacks that copy malicious code and run it on the victim’s machine.
Learn more: pushsecurity.com/blog/introd…
1
5
406
🚀 We’re thrilled to announce our $30M Series B led by @Redpoint, supercharging our mission to stop identity attacks 🚀
Check out the press release here: pushsecurity.com/news/push-s…
2
4
15
1,529
Have you signed up to see @jukelennings use OpenAI Operator to automate identity attacks? Watch the clip below to see how it responds when tasked with logging into apps using stolen credentials.
Want to see more? Register for the webinar here 👇 pushsecurity.com/webinar/aut…
2
3
968
We're ready for @BlackHatEvents Europe this week!
Stop by booth 436 to chat with @ajaybateman, @jukelennings and the team about the rise in identity attacks – and how Push's browser-based ITDR solution gives defenders the advantage they need.
We’ve got brand new swag too!
3
425
Ready to meet the REAL cookie monster?
Join us on September 12th where @jukelennings will be compromising MFA-protected services by stealing session cookies and hijacking live sessions.
Don’t miss out – register here: pushsecurity.com/webinar/inf…
1
3
378
Don't miss out on our upcoming webinar where @jukelennings will be demoing infostealers, showing how to steal cookies and hijack sessions for MFA-protected services like M365 and downstream SaaS apps. Details below 👇
Pick a time and register here: pushsecurity.com/webinar/inf…
2
320
Join us for happy hour with @sublime_sec on August 8! Grab a drink, have a bite, catch up with old friends (and make some new ones) at KUMI in Mandalay Bay!
RSVP: lu.ma/bh24-sublime-push?utm_…
176
The Snowflake breach will be for cloud identity attacks what WannaCry was for Ransomware.
Join @jukelennings to explore the practical takeaways from the incident.
Select the best time for you using the dropdown menu.
pushsecurity.com/webinar/sno…
3
2
403
Check out our upcoming webinar with @jukelennings where he'll be demoing the use of AitM phishing toolkits to compromise cloud identities! 😎
There are a few different time slots to choose from so you can catch this wherever you are.
app.livestorm.co/push/phishi…
150
Are you heading to Identiverse next week? @jukelennings will be delivering a technical masterclass demonstrating how to own a business without touching the endpoint, by targeting SaaS apps and identities. Don't miss it!
105
Check out our latest case study from Upvest! A major draw for Upvest was the power of our browser extension for identity threat detection and response, which we’re not seeing many other orgs in the ITDR space make use of. Read here: pushsecurity.com/resources/c…
131
Trying to manage the use of ChatGPT across your organization?
Use our in-browser app banners to set guardrails for GenAI apps.
Don’t leave it up to your employees to figure out how to use cloud apps securely.
Learn more - buff.ly/42xk8hN
102
🚨 New Feature Alert: In-browser app banners. Use Push to create guardrails for cloud apps 🚨
Here's our VP of Product Management Andy Waugh to tell you more 🎬
Check out the full blog post here: buff.ly/3SvmbOM
1
6
181
🎧 Listen to Push co-founder and CEO @ajaybateman on @SmashinSecurity podcast, where he, @gcluley, and @caroletheriault discuss the #IdentityAttackSurface and what you need to know to secure it.
Link to the full episode in 🧵
#identitysecurity #infosec
1
2
5
525
Hey #redteamers #pentesters, get our (ungated) guide on phishing via #Slack.
Learn:
✅ Link-spoofing techniques to make phishing links harder to spot
✅ How to modify Slack messages later to cover your tracks
Link in 🧵!
#SaaSAttacks #phishing #pentest #redteam
1
3
8
425
Oktajacking: A new attack using Okta's AD synchronization to do credential capture for you.
Link to @jukelennings full post in 🧵
👊 Thanks to @_xpn_ @TrustedSec for the inspiration!
#redteam #redteaming #pentest #pentesting #identitysecurity #SSO #okta #infosec
1
5
17
1,058
☠️ In this post, we demonstrate how an attacker can gain permanent access to many connected Okta apps, even if you reset individual app accounts.
Abusing Okta's SWA authentication method
Link in 🧵
#identitysecurity #ssosecurity #okta #iam #SSO
1
4
8
1,176
🎧 Push's VP of R&D @jukelennings joined @jaredcatkinson and @v3r5ace from @SpectreOps on @dcpthepodcast to talk #SaaSAttacks.
💡 Learn how to spoof and phish via Slack
Podcast linked in 🧵
#redteam #identitysecurity #blueteam #pentesting
3
3
12
2,782
💥 NEW ungated report on how to own a company without touching the endpoint.
💡 New SaaS-focused variations of older attacks
💡 Brand new attack techniques against SaaS-native orgs
#redteam #pentesting #pentest #blueteam #SaaSattacks #cloudsecurity #cyberthreats
Link in 🧵
1
1
154
🎧 Listen to this 30 sec clip to hear how attackers are targeting cloud identities. Push's CEO & co-founder @ajbateman joined @bittner on @thecyberwire.
Link to the full segment in 🧵
#infosec #security #identitysecurity #SaaSattacks
1
3
120
▶️ Learn how work automation tools can be a goldmine for attackers
Push's @jukelennings joined @jaredcatkinson and @v3r5ace from @SpectreOps on @dcpthepodcast to talk about his original research on #SaaSAttacks.
Podcast linked in 🧵
#redteam #identitysecurity #blueteam
1
1
3
628
Push's CEO & co-founder @ajaybateman joined @thecyberwire to discuss how attackers are targeting cloud identities.
🎧 Listen to learn about how the identity perimeter is a huge part of a company's #attacksurface
Link in 🧵
#infosec #security #identitysecurity #cybersecurity
1
2
100
💥 NEW ungated report on how to own a company without touching the network.
Learn:
💡 New SaaS-focused variations of older attacks
💡 Brand new attack techniques against SaaS-native and hybrid organizations
Report linked in 🧵
#cloudsecurity #redteam #blueteam #pentesters
1
2
177
We're looking for two engineering roles for fully remote roles (must be based in the UK).
- Senior Python Engineer
- TypeScript Engineer
Links to the job descriptions and applications in the comments 👇
#techjobs #engineeringjobs #startupjobs
1
2
201
👋 Learn how to use Slack for phishing and social engineering attacks.
Here’s a quick demo of user spoofing, link preview spoofing and a shadow workflow in action
Link in 🧵
#SaaSsecurity #identitysecurity #pentest #redteam #cloudsecurity #Pentesters #redteamers #blueteam
1
1
194
👋 #Pentesters #redteamers #blueteamers, learn how to use Slack for phishing and social engineering attacks. Then, learn how to leverage that access to maintain persistence and move laterally.
Links in the thread 👇
#SaaSsecurity #pentest #redteam #blueteam #cloudsecurity
1
4
1,530
It's spooky season 🎃 Don't forget to check your kids' candy loot...
#security #infosec #identitysecurity #oauth #cybersecurity
2
4
149
Employees are self-adopting SaaS apps and creating new cloud identities on their own.
💡 Consider Push to find these identities & guide employees to harden their accounts against attacks.
Read the blog in the 🧵 👇
#identitysecurity #saassecurity #security #IAM #tprm
1
2
3
822
Attending #BlueHat? Don't miss @jukelennings speaking about the SaaS attack cyber kill chain!
#cybersecurity #saasattacks #saassecurity #infosec #security
4
223
Attending #BlueHat? Don't miss Push's VP of Research @jukelennings speaking on the new SaaS cyber kill chain!
#cybersecurity #saasattacks #saassecurity #infosec #security
1
1
4
183
A recent report found that:
💥 68% of companies say identity-related attacks directly impacted their business in 2023
Orgs know they need to get secure these identities, but struggle to stay ahead of the sprawl.
Link in the 🧵
#security #identitysecurity #infosec
1
1
55
Going to #hacktivity2023? Catch Push's Luke Jennings on Thursday, Oct 5 at 9am in the Security Dome!
Link in 🧵
#SaaSsecurity #SaaSattacks #security #infosec
2
1
2
187
Credential stuffing: the most common attack against SaaS identities.
💥 Auth0 recently reported that credential stuffing accounts for *34% of overall traffic/authentication events on their platform.*
Link in the 🧵!
#credentialstuffing #saasattacks #identitysecurity #iam
1
1
1
170
Catch our co-founder and CEO @ajaybateman on the latest episode of @riskybusiness talking about how "identities in the cloud" are the new ports on public IP address ranges & the ways they can be targeted by attackers to own a company.
Links in the 🧵
#security #infosec
1
1
3
200
What are shadow identities and how do you manage the risk?
📓 A shadow identity is an identity a security/IT team is not aware of.
🎓 Learn more about how to manage the risk in our latest post, linked in the 🧵!
#shadowIT #shadowidentities #security #infosec #riskmanagement
1
1
902
🫣 What a SAMLjacking attack looks like to the victim.
🎓 Check out our full blog and attack demo to see how we chained two new SaaS attacks - SAMLjacking and Evil Twin Integration. Think PowerShell for SaaS.
Links in 🧵
#SaaSsecurity #redteam #pentest #pentesting #security
1
4
188
Our CEO and co-founder @ajaybateman joined Dave Bittner from @thecyberwire on the latest installment of #IndustryVoices.
📻 They discuss how identities are the new perimeter and what risks these identities introduce.
Link in the thread!
1
4
145
The latest attack chain demo from our #SaaSAttackMatrix. Catch @jukelennings talk at #44Con on Sept 14
👻 Chaining shadow workflows and evil twin integrations allows you to do almost anything you want, much like traditional code execution.
Read the blog! Link in 🧵
1
3
128
Fantastic interview with @KyleHanslovan in @DataBreachToday:
"When you think identity, you probably think of credentials...But most people forget, that could be a mailbox. Why use phishing if you get the identity?"
#security #identitysecurity
buff.ly/44uWL7T
1
4
8
929
Here's a demo combining 2 techniques from our SaaS Attacks Matrix to make a simple, but effective attack chain.
See full video in blog
Link in the 🧵!
#SaaSattacks #attacktechniques
1
1
124
The open source research we recently published intro'ed new SaaS attack methods for evading EDR & network monitoring tools.
Here's a demo combining 2 techniques to make a simple, but effective attack chain. See full video in blog
Link in the 🧵!
#SaaSattacks #attacktechniques
1
3
7
537
🔎 Focus on account security to reduce SaaS risks
📑 Read our latest article to learn how to manage the risk of SaaS security, shadow IDs, identities, and accounts.
Link in 🧵
#SaaSsecurity #shadowIT #shadowidentities #SaaSmanagement #SaaSsprawl #shadowaccounts
1
2
1
191
Learn more about new SaaS attacks we published avoid EDR and NDR tools.
Chat with @jacqueslouws, our co-founder and CPO in booth #3145.
We'll can also demo the product and send you off with tees and stickers!
#blackhat2023 #blackhat #infosec #security #saassecurity
1
1
161
👋 New feature alert!
Classify SaaS apps in the Push platform based on the sensitivity of the data they contain or the permissions they've been granted.
Use the Approval status to capture your decision about an app -- is it in or out?
Link in 🧵
#SaaSsecurity #security
1
3
6
639
💡 Introducing a SaaS attack matrix of networkless SaaS attack techniques
- These attacks bypass EDR and network detection
💬 #Pentesters #Redteams We’d love to some comments or contributions for things you've tried on GitHub!
Links in 🧵
#security #infosec #SaaSsecurity
2
5
18
3,200
Hear how our hacker founders moved from offense to defense to focus on fighting against new SaaS attacks.
Links in the 🧵
#podcast #cybersecurity #security #infosec #cyberbytes
1
3
116
Hear how one of our hacker founders @ajaybateman moved from offense to defense to focus on fighting against new SaaS attack vectors.
Links in the 🧵
#podcast #cybersecurity #security #infosec #cyberbytes
3
1
6
174
👋 Curious about new SaaS attack methods? Going to #blackhatUSA
Come by our booth to talk with our technical leads to learn how attackers are leveraging SaaS and integrations to your cloud services to get at your sensitive data.
#blackhat2023 #blackhat #security #saassecurity
1
2
5
249
🔍 It’s not just paid apps that are #security risks to your business. When testing an app, employees almost always need to connect the app to real corporate data.
Find those trial apps and get involved before they're adopted.
buff.ly/44FY9VE
#saassecurity #infosec
2
7
167
📚 Learn how SaaS has changed how companies adopt software & how security must adapt to manage #ShadowIT
Grab our ungated PDF to see how to adapt your team's security philosophy to keep up! buff.ly/3Ppn4sb
#security #infosec #SaaSsecurity
63
Employees are signing up for SaaS apps on their own. Once you get #SaaSVisibility, you may try to regain control by blocking access to unsanctioned SaaS, but that leads to even LESS visibility. There's a better way: buff.ly/3NndzY9
#Security #infosec #SaaSSecurity
1
71
🫶 "The browser extension is clever, non-intrusive, and was developed with a strong focus on security and privacy. I also like the ChatOps feature, which empowers and educates employees." buff.ly/3qKQarZ
2
3
739
Yay - glad we're helping you find #shadowIT and help employees use their SaaS apps more securely, Nick! buff.ly/43JNoBc
59
If you're heading to #infosecurityeurope next week, we're hosting a happy hour for chats and 🍺. We're chaining up our sales guy so he can't ask you if you want a demo. DM us if you're interesting in attending so we can send you registration info! #security #infosec
4
148
Mitigate the risk by removing the mail rule(s) and kick off your #incidentresponse investigation to understand the scope of the problem.
Push can help detect suspicious mail rules, validate them, and help you remove them. buff.ly/3MTbu5U
Use Push for free!
51
✉️ 🚫 More instances of attackers using malicious mail rules during their #BEC attacks, this one from Microsoft. buff.ly/42w1c1i
We're seeing quite a few recent reports involving mail rules, which is why it's such an important thing to look for when detecting attacks.
1
2
277
"The security team now receive real-time Slack notifications when new SaaS services are accessed by employees, allowing us to understand the impact & act immediately where necessary."
Thanks, Nick! buff.ly/43JNoBc
#shadowSaaS #SaaSManagement #riskmanagement
3
115
🧪 New Labs feature just launched! See which employees aren't using a #passwordmanager
Labs is where we test new functionality and get feedback about how we can make them even more useful.
See it in action here: buff.ly/3WUIXRW
Then sign up and give it a spin!
1
2
147
📘 Learn how to shortlist SaaS security solutions to evaluate and find out how to make a case for budget by discussing how #SaaSsecurity tools can help meet broader business initiatives
buff.ly/3OVQRJ0
#SaaSManagement #secureSaaS #SupplyChain #Security #infosec
3
261
New report from @ExpelSecurity - 56% of incidents were account compromise. For about half of those, attackers created mail rules to hide emails.
Push automatically detects malicious mail rules. See how it works! buff.ly/3oMpoPa
#riskmanagement #incidentresponse
2
314
Loving all the positive feedback in G2!
Also, this comment kills us: "...but now I see what my teammates are truly up to..." 💀
[hang in there cat poster] You can do this. Remember, they've just been working around you to get things done, not because they hate you.
1
4
207
🎡 Heading to #InfosecEurope in London, June 20-22?
🚫 We promise not to scan your badge
We'll help you find apps your employees are using so you can secure the trusted ones & remove the high-risk apps. Chat w/our technical team at stand AB42! buff.ly/3C341MI
1
1
101
Cheers, Nancy - Thanks for the kind words and great feedback! buff.ly/3N4WK5k
Learn more about how Push helps you maintain compliance in a SaaS-first world buff.ly/43BIjLj
1
1
4
176
We're just back from our first team trip where the Push crew could meet in person for the first time. It. Was. Unreal.
It's amazing the things that are possible when you're not paying for an office space. #remotework #workfromhome #remoteworking #digitalnomad #futureofwork
1
7
287