Salesforce

AI is changing what Salesforce security needs to govern

AI, automation, cybersecurity, framework, News, Salesforce, WithSecure /

AI is changing what Salesforce security needs to govern 2026-09-11 at 07:30 By Anamarija Pogorelec Existing security and governance practices have largely focused on identities, permissions, access, configurations and controls. WithSecure’s Navigating Trust in the Modern Salesforce Ecosystem paper says Salesforce environments also require organizations to understand what information they rely on, how trust extends […]

AI is changing what Salesforce security needs to govern Read More »

A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months

cybersecurity, Data leak, data security, Don't miss, misconfiguration, News, research, Salesforce, ServiceNow, Threat Intelligence /

A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months 2026-08-12 at 16:51 By Mirko Zorz Most security stories start with something broken. This one starts with everything working as designed. Researchers at Reco have been tracking a campaign they call City-Forum, named after a domain registered in 2002, abandoned, and now […]

A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months Read More »

Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset

Malware & Threats, Salesforce, ServiceNow /

Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset 2026-08-12 at 16:00 By Kevin Townsend Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms. The post Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset appeared first on SecurityWeek. This article is an […]

Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset Read More »

BeyondTrust, LastPass Impacted by Klue-Salesforce Incident

data breach, Data Breaches, Klue, Salesforce /

BeyondTrust, LastPass Impacted by Klue-Salesforce Incident 2026-06-24 at 13:03 By Ionut Arghire Over a dozen Klue customers have confirmed that hackers stole data from their Salesforce instances. The post BeyondTrust, LastPass Impacted by Klue-Salesforce Incident appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

BeyondTrust, LastPass Impacted by Klue-Salesforce Incident Read More »

LastPass customer data exposed through Klue supply chain attack

data theft, Huntress, Klue, LastPass, News, Salesforce, supply chain compromise /

LastPass customer data exposed through Klue supply chain attack 2026-06-24 at 12:59 By Sinisa Markovic LastPass disclosed that attackers used OAuth tokens compromised in a supply chain attack on Klue, a market intelligence platform that integrates with CRM and sales tools across organizations, to access customer data stored in its Salesforce environment. “On June 12th […]

LastPass customer data exposed through Klue supply chain attack Read More »

Klue breach lead to Salesforce data theft, Huntress affected

data theft, Don't miss, extortion, Hot stuff, Huntress, Klue, News, Salesforce, supply chain compromise /

Klue breach lead to Salesforce data theft, Huntress affected 2026-06-19 at 15:57 By Zeljka Zorz Cybersecurity vendor Huntress was among multiple companies hit by a breach originating at Klue, a market intelligence platform used to integrate CRM and sales data across various business tools. Huntress published a detailed account of the incident on June 18, […]

Klue breach lead to Salesforce data theft, Huntress affected Read More »

7-Eleven Data Breach Confirmed After ShinyHunters Ransom Demand

7-Eleven, data breach, Data Breaches, Salesforce, ShinyHunters /

7-Eleven Data Breach Confirmed After ShinyHunters Ransom Demand 2026-05-18 at 15:10 By Eduard Kovacs The hackers claimed to have stolen more than 600,000 Salesforce records, including personal information and corporate data.  The post 7-Eleven Data Breach Confirmed After ShinyHunters Ransom Demand appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

7-Eleven Data Breach Confirmed After ShinyHunters Ransom Demand Read More »

ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites

access controls, access management, data theft, Don't miss, Hot stuff, misconfiguration, News, Salesforce /

ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites 2026-03-11 at 20:28 By Zeljka Zorz Salesforce customers have, once again, been targeted by the ShinyHunters group – or, at least, it’s what the group claims. Attackers modified and abused benign tool On Saturday, Saleforce confirmed that its security team has identified an attack campaign by […]

ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites Read More »

Hundreds of Salesforce Customers Allegedly Targeted in New Data Theft Campaign

cybercrime, data breach, Data Breaches, data extortion, data theft, extortion, Salesforce, ShinyHunters /

Hundreds of Salesforce Customers Allegedly Targeted in New Data Theft Campaign 2026-03-10 at 15:06 By Eduard Kovacs Salesforce has confirmed that customers are being targeted via poorly secured instances. The post Hundreds of Salesforce Customers Allegedly Targeted in New Data Theft Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Hundreds of Salesforce Customers Allegedly Targeted in New Data Theft Campaign Read More »

AuraInspector: Open-source tool to audit Salesforce Aura access control misconfigurations

GitHub, Google Cloud, Mandiant, News, Salesforce, software /

AuraInspector: Open-source tool to audit Salesforce Aura access control misconfigurations 2026-01-13 at 17:45 By Anamarija Pogorelec Google and its Mandiant threat intelligence unit have released AuraInspector, an open-source tool aimed at auditing data access paths in Salesforce Experience Cloud applications. The tool focuses on the Aura framework, which underpins many Salesforce user interfaces and plays […]

AuraInspector: Open-source tool to audit Salesforce Aura access control misconfigurations Read More »

Gainsight breach: Salesforce details attack window, issues investigation guidance

data theft, Don't miss, Gainsight, Hot stuff, Mandiant, News, Palo Alto Networks, SaaS, Salesforce, supply chain compromise /

Gainsight breach: Salesforce details attack window, issues investigation guidance 2025-11-26 at 16:30 By Zeljka Zorz The number of Salesforce customers affected by the recent compromise of Gainsight-published applications is yet to be publicly confirmed, but Salesforce released indicators of compromise (IoCs) and simultaneously shed some light on when the attack likely started. The provided list […]

Gainsight breach: Salesforce details attack window, issues investigation guidance Read More »

Salesforce Gainsight compromise: Early findings and customer guidance

Don't miss, Gainsight, Hot stuff, Mandiant, News, SaaS, Salesforce, supply chain compromise /

Salesforce Gainsight compromise: Early findings and customer guidance 2025-11-21 at 14:16 By Zeljka Zorz In the wake of Salesforce’s announcement about “unusual activity involving Gainsight-published applications” and the company’s revocation of access and refresh tokens associated with them, Gainsight has been doing a good job keeping customers updated on current investigation findings. On the status […]

Salesforce Gainsight compromise: Early findings and customer guidance Read More »

Salesforce Instances Hacked via Gainsight Integrations

data breach, Data Breaches, Gainsight, Salesforce /

Salesforce Instances Hacked via Gainsight Integrations 2025-11-21 at 11:50 By Ionut Arghire The infamous ShinyHunters hackers have targeted customer-managed Gainsight-published applications to steal data from Salesforce instances. The post Salesforce Instances Hacked via Gainsight Integrations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Salesforce Instances Hacked via Gainsight Integrations Read More »

Salesforce investigates new incident echoing Salesloft Drift compromise

data theft, Don't miss, Gainsight, Google Cloud, Hot stuff, Mandiant, News, SaaS, Salesforce, supply chain compromise /

Salesforce investigates new incident echoing Salesloft Drift compromise 2025-11-20 at 23:14 By Zeljka Zorz In what may be a repeat of the Salesloft Drift supply chain compromise, Salesforce confirmed that they’ve identified unusual activity involving Gainsight-published apps connected to Salesforce. “Our investigation indicates this activity may have enabled unauthorized access to certain customers’ Salesforce data […]

Salesforce investigates new incident echoing Salesloft Drift compromise Read More »

Hackers launch data leak site to extort 39 victims, or Salesforce

Data leak, data theft, Don't miss, extortion, Hot stuff, News, Salesforce, social engineering /

Hackers launch data leak site to extort 39 victims, or Salesforce 2025-10-06 at 17:44 By Zeljka Zorz Scattered Lapsus$ Hunters launched a data leak site over the weekend, aiming to pressure organizations whose Salesforce databases they have plundered into paying to prevent the stolen data from being released. Screenshot of Scattered Lapsus$ Hunters data leak […]

Hackers launch data leak site to extort 39 victims, or Salesforce Read More »

Hackers Extorting Salesforce After Stealing Data From Dozens of Customers

data breach, Data Breaches, Data leak, extortion, Salesforce, Scattered Spider, ShinyHunters /

Hackers Extorting Salesforce After Stealing Data From Dozens of Customers 2025-10-06 at 15:28 By Ionut Arghire Salesforce says the extortion attempts are related to past or unsubstantiated incidents, and not to fresh intrusions. The post Hackers Extorting Salesforce After Stealing Data From Dozens of Customers appeared first on SecurityWeek. This article is an excerpt from […]

Hackers Extorting Salesforce After Stealing Data From Dozens of Customers Read More »

Automotive Titan Stellantis Discloses Data Breach

cars, data breach, Data Breaches, Featured, Salesforce, ShinyHunters, Stellantis /

Automotive Titan Stellantis Discloses Data Breach 2025-09-23 at 12:30 By Ionut Arghire The company says customer contact information was stolen from a third-party service provider’s platform. The post Automotive Titan Stellantis Discloses Data Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Automotive Titan Stellantis Discloses Data Breach Read More »

FBI Shares IoCs for Recent Salesforce Intrusion Campaigns

FBI, IOC, Malware & Threats, Salesforce, Salesloft /

FBI Shares IoCs for Recent Salesforce Intrusion Campaigns 2025-09-15 at 16:06 By Ionut Arghire The cybercrime groups tracked as UNC6040 and UNC6395 have been extorting organizations after stealing data from their Salesforce instances. The post FBI Shares IoCs for Recent Salesforce Intrusion Campaigns appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

FBI Shares IoCs for Recent Salesforce Intrusion Campaigns Read More »

Salesloft GitHub Account Compromised Months Before Salesforce Attack

Data Breaches, Featured, Salesforce, Salesloft, UNC6395 /

Salesloft GitHub Account Compromised Months Before Salesforce Attack 2025-09-08 at 16:06 By Ionut Arghire The list of impacted cybersecurity firms has been expanded to include BeyondTrust, Bugcrowd, CyberArk, Cato Networks, JFrog, and Rubrik. The post Salesloft GitHub Account Compromised Months Before Salesforce Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Salesloft GitHub Account Compromised Months Before Salesforce Attack Read More »

Salesloft Drift data breach: Investigation reveals how attackers got in

credentials, data theft, Don't miss, Hot stuff, Mandiant, News, Salesforce, Salesloft, supply chain compromise /

Salesloft Drift data breach: Investigation reveals how attackers got in 2025-09-08 at 14:33 By Zeljka Zorz The attack that resulted in the Salesloft Drift data breach started with the compromise of the company’s GitHub account, Salesloft confirmed this weekend. Supply chain compromise On August 26, the company publicly revealed that earlier that month, a threat […]

Salesloft Drift data breach: Investigation reveals how attackers got in Read More »

Scroll to Top