Researchers have discovered a flaw in Google’s OAuth system that could allow attackers to access potentially sensitive data from former employee accounts at defunct startups. Google’s OAuth is the ...
In recent weeks, major companies like Palo Alto Networks, Zscaler, Cloudflare, and SpyCloud have all confirmed they were affected by a string of cyberattacks that began with Salesforce. Or at least, ...
The ShinyHunters extortion group claims to have stolen over 1.5 billion Salesforce records from 760 companies using ...
An as-of-yet undiagnosed compromise of the Salesloft Drift AI-driven platform has led to a rash of stolen OAuth tokens, in turn creating downstream breaches at some of the biggest names in the ...
Turns out your biggest breach risk might come from a vendor’s acquisition — and an old OAuth token you didn’t even know ...
Threat actors had access to Salesloft’s GitHub account between March and June 2025 and performed reconnaissance.
The FBI has issued a FLASH alert warning that two threat clusters, tracked as UNC6040 and UNC6395, are compromising organizations' Salesforce environments to steal data and extort victims.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback