How LottieFiles Secured Its SaaS Platform Fast.

What we’ll cover today:

🚨 SaaS Security Breach Alert.
🚀 SaaS Leaders to Build a Data Pipeline With AI.
💡 Spend Less on A/B Tests.
🔗 The Event Roundup.

SaaS Security Breach Alert.

This week, LottieFiles—a popular animation SaaS—faced exactly that scenario.

A security breach in their npm package exposed users to malicious code.

Here’s what went down:

• Versions 2.0.5 to 2.0.7 of the Lottie Web Player were compromised.

• The malicious code could prompt unsuspecting users to connect crypto wallets, creating a potential risk of asset theft.

• LottieFiles acted fast, rolling out a secure update (version 2.0.8).

What actions can you take?

• Upgrade to the latest version (2.0.8) for immediate security.

• Can’t update? Stick with version 2.0.4 as a safer alternative.

• Notify your users about potential suspicious wallet prompts.

This incident is more than a one-off glitch—it’s a crucial reminder for all SaaS providers.

Here's More From The Article

1. SaaS Leaders to Build a Data Pipeline With AI.

This is a podcast from TechCrunch about “How AI empowers SaaS leaders to build a new data pipeline?”

Watch DataStax’s Chairman & CEO Chet Kapoor, NEA Partner Vanessa Larco, and Fivetran CEO George Fraser, leaders working to build the tools to make the new data pipeline happen.

Here’s The Podcast.

2. Spend Less on A/B Tests.

This is a 5-minute video from Jean Michel to SaaS founders.

Jean is a CMO who has been in tech for 20+ years. He helps SaaS founders and entrepreneurs unlock product growth.

“Give me the next five minutes and I'm going to show you how you can start to optimize your landing page benefits without spending money on AB tests.” Jean wrote.

Here’s The Whole Tweet

1. SaaS platform acquired by nCino for $135m.

A Winnersh-based SaaS platform has been acquired by the US software development company nCino for $135m.

Founded in 2007, FullCircl scans millions of online sources for data on markets, organisations, individuals and topics, and uses algorithms to filter and transform that information into commercially valuable insights.

2. DattoCon: SaaS Alerts, Kaseya a 'Great Combo'

According to the CEO of the SaaS security platform, Kaseya's decision to buy SaaS Alerts results in a "great combination."

SaaS Alerts CEO Jim Lippie appeared on stage at DattoCon before hundreds of MSP owners and employees to discuss his decision to sell the endpoint management provider to Kaseya, one that will allow Kaseya to include it within its newly revealed 365 User subscription service.

3. HeartCore rolls out SaaS model for its CMS platform.

HeartCore, a Tokyo-based enterprise software and data consulting services company, has expanded its content management system (CMS) platform to include a SaaS model. 

This move is designed to complement the company's existing on-premises version and is expected to extend its market reach by targeting businesses that prefer SaaS solutions.