Advertisement
Klue-Salesforce Breach Exposes Competitive Data; Threat Actors Hacked
Klue's Salesforce instance breach exposed customer competitive intelligence and contact data via an API vulnerability. The initial attackers were subsequently
OAuth Token Theft: How Icarus Targets Salesforce via Klue Breach
Attackers known as Icarus are exploiting compromised OAuth tokens from Klue to exfiltrate sensitive Salesforce data. Learn how to mitigate supply chain risks.
Klue OAuth Breach: Icarus Threat Group Targets Salesforce
Klue confirms an OAuth token breach by the Icarus group, potentially exposing customer Salesforce environments. Learn how to secure your integrations.
Klue Supply Chain Attack Hits Salesforce Instances of Security Firms
Attackers breached competitive intelligence platform Klue, exfiltrating data from Salesforce instances of customers including Huntress and Recorded Future.
Salesforce Disables Klue App Integration Following OAuth Token Abuse
Salesforce suspends Klue Battlecards integration after OAuth token abuse exposed customer data, highlighting significant SaaS supply chain security risks.
McGraw-Hill Data Breach: Salesforce Misconfiguration Exploited
McGraw-Hill confirms a data breach after threat actors exploited a Salesforce misconfiguration, exposing internal records and student information.
Secure Salesforce Cloud: Restricting Guest User Permissions
Runtime Rebel analyzes critical Salesforce guest user misconfigurations exposing sensitive client data. Learn how to secure your Salesforce Cloud instance and protect
Salesforce Experience Cloud Mass-Scanning via Modified AuraInspector
Threat actors use a modified AuraInspector tool to exploit Salesforce Experience Cloud misconfigurations, exposing sensitive guest user data.