-Even if a specific app is relatively secure, 3rd party risks are a real concern. Many apps use App2App connections, which see them exchange data with an additional app - and this may occur without the knowledge of the user. App2App connections are part of daily life (such as giving Slack permission to access your Google Drive, or logging into Zoom via your Google account). These connections can potentially be exploited by cybercriminals to gain entry and also lateral movement once they’ve entered your network -Supply chain attacks, which target a company’s external partners in order to breach an organization, are also growing in popularity. During these attacks, cybercriminals infiltrate a service provider, using that organization as a stepping stone to exploit the trust and established connection the company has to other organizations along the supply chain.. -Zero day attacks focus on previously undetected vulnerabilities within software. These vulnerabilities can be leveraged by cybercriminals to breach and compromise an organization. While it may seem like an essential component of SaaS security best practices, failing to do proper due diligence can also be a problem. If you don’t take a deep look into the security standards and reputations of the apps your company uses, you might be exposing your organization to unnecessary risk.