Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Salesforce"
Data Breaches
Over a dozen Klue customers have confirmed that hackers stole data from their Salesforce instances.
Data Breaches
The hackers claimed to have stolen more than 600,000 Salesforce records, including personal information and corporate data.
Cybercrime
Salesforce has confirmed that customers are being targeted via poorly secured instances.
Data Breaches
Luxury brands were among the dozens of major companies whose Salesforce instances were targeted by Scattered LAPSUS$ Hunters.
Data Breaches
The infamous ShinyHunters hackers have targeted customer-managed Gainsight-published applications to steal data from Salesforce instances.
Data Breaches
Salesforce says the extortion attempts are related to past or unsubstantiated incidents, and not to fresh intrusions.
Data Breaches
The company says customer contact information was stolen from a third-party service provider’s platform.
Malware & Threats
The cybercrime groups tracked as UNC6040 and UNC6395 have been extorting organizations after stealing data from their Salesforce instances.
Data Breaches
The list of impacted cybersecurity firms has been expanded to include BeyondTrust, Bugcrowd, CyberArk, Cato Networks, JFrog, and Rubrik.
Data Breaches
Proofpoint, SpyCloud, Tanium, and Tenable confirmed that hackers accessed information stored in their Salesforce instances.
Data Breaches
Hackers accessed customer contact information and case data from Salesforce instances at Cloudflare, Palo Alto Networks, and Zscaler.
Data Breaches
Google says the hackers systematically exported corporate data, focusing on secrets such as AWS and Snowflake keys.
Data Breaches
A Google Salesforce instance may have been targeted as part of a ShinyHunters campaign that hit several major companies.
Application Security
Security researchers uncover critical flaws and widespread misconfigurations in Salesforce’s industry-specific CRM solutions.
Email Security
Threat actors have exploited a Salesforce email service zero-day vulnerability and abused Meta features in a sophisticated phishing campaign.
Cloud Security
Salesforce ghost sites — domains that are no longer maintained but still accessible — can expose personal information and business data.
Mobile & Wireless
The bugs could be exploited to crash Safari, corrupt memory, leak sensitive data, escape the sandbox, and exfiltrate data.
Artificial Intelligence
Vulnerabilities
Supply Chain Security
Data Breaches
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
