Shadow apps, a segment of Shadow IT, are SaaS applications purchased without the knowledge of the security team. While these applications may be legitimate, they operate within the blind spots of the corporate security team and expose the company to attackers. 
Shadow apps may include instances of software that the company is already using. For example, a dev team may onboard their own



Source: TheHackerNews
Source Link: https://thehackernews.com/2024/09/shining-light-on-shadow-apps-invisible.html