Skip to Content Facebook Feature Image

At Black Hat 2025, LastPass Debuts SaaS Protect to Help Small and Mid-Sized Businesses Stop Employees from Using Unapproved SaaS and AI Apps and Weak Credentials

News

At Black Hat 2025, LastPass Debuts SaaS Protect to Help Small and Mid-Sized Businesses Stop Employees from Using Unapproved SaaS and AI Apps and Weak Credentials
News

News

At Black Hat 2025, LastPass Debuts SaaS Protect to Help Small and Mid-Sized Businesses Stop Employees from Using Unapproved SaaS and AI Apps and Weak Credentials

2025-08-04 20:29 Last Updated At:20:50

BOSTON--(BUSINESS WIRE)--Aug 4, 2025--

LastPass, a global leader in password and identity management trusted by over 100,000 businesses worldwide, today unveiled SaaS Protect at Black Hat 2025. Building on the company’s existing SaaS Monitoring capabilities, SaaS Protect introduces a robust set of policy enforcements that enable organizations to move from passive visibility into proactive access control. With features including customizable SaaS app policies, credential risk detection, and real-time enforcement reporting, SaaS Protect empowers IT and security teams to address Shadow IT and Shadow AI and credential misuse with speed, precision, and confidence.

This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250804484746/en/

Business benefits include:

SaaS Protect is now available in beta to current LastPass Business and Business Max customers and will be included at no additional cost in the Business Max bundle. The feature is being showcased live at Black Hat 2025, with general availability expected in early Fall.

SaaS Sprawl is putting small and mid-sized businesses at elevated risk

According to Zylo, small and mid-sized businesses now use an average of 275 known SaaS applications, but IT teams oversee just 26% of that spend, with the rest driven by business units and individual employees. In addition, recent studies show organizations may be using 10 times more SaaS apps than they realize, with Shadow IT and Shadow AI tools pushing the actual footprint to hundreds of applications.

This mix of sanctioned and unsanctioned tools creates a sprawling, fragmented attack surface that most smaller organizations lack the resources to monitor or secure. Alarmingly, around 78% of users reuse the same password across multiple accounts, and when those reused or weak credentials tie back to unmanaged apps, credential risk can skyrocket. IT can’t protect what they don’t know exists, leaving sensitive data exposed, compliance at risk, and productivity strained by fragmented access and limited support.

“Small and mid-sized businesses are facing a perfect storm of complexity: unknown risks living within unknown apps and AI services,” said Don MacLennan, Chief Product Officer at LastPass. “We built SaaS Protect to turn that chaos into clarity. It’s designed specifically for resource-constrained businesses that need visibility, policy enforcement, and credential protection without adding operational overhead.”

Transforming visibility to action

Launched in May 2025, LastPass SaaS Monitoring gave organizations and LastPass Partners a consolidated view of application usage and credential hygiene. But visibility alone isn’t enough. With 75% of employees expected to use unauthorized tech by 2027, businesses need a way to intervene quickly and confidently.

That’s where SaaS Protect comes in. Building on the foundation of SaaS Monitoring, SaaS Protect gives businesses the ability to act on how tools are being used, spot risky behavior, and make informed decisions about which apps to allow, restrict, or retire.

All of this happens without disrupting the workforce. No device agents. No heavy deployments. The feature operates via the browser extension on employee devices, with activity data and policy enforcement results populating directly in the admin console.

Democratizing secure access experiences

SaaS Monitoring and SaaS Protect are part of the broader Secure Access Experiences approach from LastPass—an evolving framework that unifies visibility, credential hygiene, and access control into one intuitive experience. It’s built for organizations that need to move fast, stay secure, and manage access based on their own policies—not just passwords.

SaaS Protect will be generally available in late August 2025. Visit LastPass at Black Hat Las Vegas, Booth 5311, August 4–7, to learn more, or sign up for updates here. In addition, passkeys—credential-free authentication that replaces traditional passwords with biometric or device-based login—will also be available for demo at the conference and are slated for general availability in late August following an extended beta period.

About LastPass

LastPass is a leading identity and password manager, making it easier to log in to life and work. Trusted by 100,000 businesses and millions of users, LastPass combines advanced security with effortless access for individuals, families, small business owners, and enterprise professionals. Learn more at www.lastpass.com and follow us on LinkedIn, X, Instagram, and Facebook.

LastPass SaaS Protect empowers IT and security teams to address Shadow IT and Shadow AI and credential misuse with speed, precision, and confidence.

LastPass SaaS Protect empowers IT and security teams to address Shadow IT and Shadow AI and credential misuse with speed, precision, and confidence.

STATESVILLE, N.C. (AP) — A business jet crashed Thursday while trying to return to a North Carolina airport shortly after takeoff, killing all seven people aboard, including retired NASCAR driver Greg Biffle and his family, authorities said.

The Cessna C550 erupted into a large fire when it hit the ground. It had departed Statesville Regional Airport, about 45 miles (72 kilometers) north of Charlotte, but soon crashed while trying to return and land, the North Carolina State Highway Patrol said.

Flight records show the plane was registered to a company run by Biffle. The cause of the crash wasn't immediately known, nor was the reason for the plane's return to the airport in drizzle and cloudy conditions.

Federal Aviation Administration records show Biffle was rated to fly helicopters and single and multi-engine planes. It wasn't clear if Biffle was piloting the plane at the time of the crash.

Biffle was on the plane with his wife, Cristina, and children Ryder, 5, and Emma, 14, according to the highway patrol and a family statement. Others on the plane were identified as Dennis Dutton, his son Jack, and Craig Wadsworth.

“Each of them meant everything to us, and their absence leaves an immeasurable void in our lives,” the joint family statement said.

Biffle, 55, won more than 50 races across NASCAR’s three circuits, including 19 at the Cup Series level. He also won the Trucks Series championship in 2000 and the Xfinity Series title in 2002.

NASCAR said it was devastated by the news.

“Greg was more than a champion driver; he was a beloved member of the NASCAR community, a fierce competitor, and a friend to so many,” NASCAR said. “His passion for racing, his integrity, and his commitment to fans and fellow competitors alike made a lasting impact on the sport.”

The plane, bound for Florida, took off from the Statesville airport shortly after 10 a.m., according to tracking data posted by FlightAware.com.

Golfers playing next to the airport were shocked as they witnessed the disaster, even dropping to the ground at the Lakewood Golf Club while the plane was overhead. The ninth hole was covered with debris.

“We were like, ‘Oh my gosh! That’s way too low,’” said Joshua Green of Mooresville. “It was scary.”

The National Transportation Safety Board and the Federal Aviation Administration were investigating.

The Cessna plane, built in 1981, is a popular mid-sized business jet with an excellent reputation, aviation safety expert Jeff Guzzetti said. It has two engines and typically seats six to eight passengers and two pilots.

In 2024, Biffle was honored for his humanitarian efforts after Hurricane Helene struck the U.S., even using his personal helicopter to deliver aid to flooded, remote western North Carolina.

“The last time I spoke with Cristina, just a couple of weeks ago, she reached out to ask how she could help with relief efforts in Jamaica. That’s who the Biffles were," U.S. Rep. Richard Hudson, a Republican from North Carolina, said.

Wadsworth was Biffle's friend and helped him with odd jobs, including delivering supplies to places hit by Hurricane Helene, roommate Benito Howell said.

“He didn’t know how to say no,” Howell said of Wadsworth, who had worked for several NASCAR teams. “He loved everybody. He always tried to help everybody.”

The joint family statement also spoke about Dutton and his son Jack, saying they were "deeply loved as well, and their loss is felt by all who knew them."

With 2025 almost over, there have been 1,331 U.S. crashes this year investigated by the NTSB, from two-seat planes to commercial aircraft, compared to a total of 1,482 in 2024.

Major air disasters around the world in 2025 include the plane-helicopter collision that killed 67 in Washington, the Air India crash that killed 260 in India, and a crash in Russia’s Far East that claimed 48 lives. Fourteen people, including 11 on the ground, died in a UPS cargo plane crash in Kentucky.

Robertson reported from Raleigh, North Carolina. Associated Press writers John Seewer in Toledo, Ohio; Jenna Fryer in Charlotte, North Carolina; Josh Funk in Omaha, Nebraska; Ed White in Detroit; and Sarah Brumfield in Washington contributed to this story.

FILE - Former driver Greg Biffle waves to fans prior to a NASCAR Cup Series auto race at Darlington Raceway, Aug. 31, 2025, in Darlington, S.C. (AP Photo/Matt Kelley, File)

FILE - Former driver Greg Biffle waves to fans prior to a NASCAR Cup Series auto race at Darlington Raceway, Aug. 31, 2025, in Darlington, S.C. (AP Photo/Matt Kelley, File)

FILE - Greg Biffle smiles along pit row during qualifying for Sunday's NASCAR Sprint Cup Series auto race at Atlanta Motor Speedway, Friday, Aug. 31, 2012, in Hampton, Ga. (AP Photo/David Tulis, File)

FILE - Greg Biffle smiles along pit row during qualifying for Sunday's NASCAR Sprint Cup Series auto race at Atlanta Motor Speedway, Friday, Aug. 31, 2012, in Hampton, Ga. (AP Photo/David Tulis, File)

FILE - Greg Biffle celebrates in victory lane after winning the NASCAR Sprint Cup Series auto race at Kansas Speedway on Sunday, Oct. 3, 2010, in Kansas City, Kan. (AP Photo/Orlin Wagner, File)

FILE - Greg Biffle celebrates in victory lane after winning the NASCAR Sprint Cup Series auto race at Kansas Speedway on Sunday, Oct. 3, 2010, in Kansas City, Kan. (AP Photo/Orlin Wagner, File)

First responders tend to the scene of a reported plane crash at a regional airport in Statesville, N.C., Thursday, Dec. 18, 2025. (AP Photo/Matt Kelley)

First responders tend to the scene of a reported plane crash at a regional airport in Statesville, N.C., Thursday, Dec. 18, 2025. (AP Photo/Matt Kelley)

First responders tend to the scene of a reported plane crash at a regional airport in Statesville, N.C., Thursday, Dec. 18, 2025. (AP Photo/Matt Kelley)

First responders tend to the scene of a reported plane crash at a regional airport in Statesville, N.C., Thursday, Dec. 18, 2025. (AP Photo/Matt Kelley)

First responders tend to the scene of a reported plane crash at a regional airport in Statesville, N.C., Thursday, Dec. 18, 2025. (AP Photo/Matt Kelley)

First responders tend to the scene of a reported plane crash at a regional airport in Statesville, N.C., Thursday, Dec. 18, 2025. (AP Photo/Matt Kelley)

This screengrab made from video provided by WSOC shows firefighting crews responding to a reported plane crash at a regional airport in Statesville, N.C., erupting in a large fire, Thursday, Dec. 8, 2025. (WSOC via AP)

This screengrab made from video provided by WSOC shows firefighting crews responding to a reported plane crash at a regional airport in Statesville, N.C., erupting in a large fire, Thursday, Dec. 8, 2025. (WSOC via AP)

Recommended Articles