SaaS attack technique matrix
Inspired by MITRE ATT&CK, the good folks at Push Security have taken a pass at enumerating attack techniques specific to Software-as-a-Service (SaaS) applications.
ATT&CK is a great and robust framework, and I love to see it adapted to capture techniques and tactics for different types of systems.