RuntimeRebel — #SalesforceCybersecurity articles tagged #Salesforce on RuntimeRebel.https://runtimerebel.comKlue-Salesforce Breach Exposes Competitive Data; Threat Actors Hackedhttps://runtimerebel.com/blog/klue-salesforce-breach-exposes-competitive-data-threat-actors-hackedhttps://runtimerebel.com/blog/klue-salesforce-breach-exposes-competitive-data-threat-actors-hackedKlue's Salesforce instance breach exposed customer competitive intelligence and contact data via an API vulnerability.Fri, 26 Jun 2026 16:48:46 GMTKlueSalesforceData BreachSupply Chain AttackWhite RabbitDarkVaultIntelBrokerAPI SecurityOAuth Token Theft: How Icarus Targets Salesforce via Klue Breachhttps://runtimerebel.com/blog/oauth-token-theft-how-icarus-targets-salesforce-via-klue-breachhttps://runtimerebel.com/blog/oauth-token-theft-how-icarus-targets-salesforce-via-klue-breachAttackers known as Icarus are exploiting compromised OAuth tokens from Klue to exfiltrate sensitive Salesforce data. Learn how to mitigate supply chain risks.Wed, 24 Jun 2026 09:21:31 GMTSalesforceKlueIcarusOAuth Token TheftSupply Chain AttackKlue OAuth Breach: Icarus Threat Group Targets Salesforcehttps://runtimerebel.com/blog/klue-oauth-breach-icarus-threat-group-targets-salesforcehttps://runtimerebel.com/blog/klue-oauth-breach-icarus-threat-group-targets-salesforceKlue confirms an OAuth token breach by the Icarus group, potentially exposing customer Salesforce environments. Learn how to secure your integrations.Sat, 20 Jun 2026 01:00:14 GMTKlueOAuthSalesforceIcarusData BreachToken TheftSupply Chain AttackKlue Supply Chain Attack Hits Salesforce Instances of Security Firmshttps://runtimerebel.com/blog/klue-supply-chain-attack-hits-salesforce-instances-of-security-firmshttps://runtimerebel.com/blog/klue-supply-chain-attack-hits-salesforce-instances-of-security-firmsAttackers breached competitive intelligence platform Klue, exfiltrating data from Salesforce instances of customers including Huntress and Recorded Future.Fri, 19 Jun 2026 09:44:49 GMTKlueSalesforceHuntressRecorded FutureSaaS SecurityData ExfiltrationSalesforce Disables Klue App Integration Following OAuth Token Abusehttps://runtimerebel.com/blog/salesforce-disables-klue-app-integration-following-oauth-token-abusehttps://runtimerebel.com/blog/salesforce-disables-klue-app-integration-following-oauth-token-abuseSalesforce suspends Klue Battlecards integration after OAuth token abuse exposed customer data, highlighting significant SaaS supply chain security risks.Fri, 19 Jun 2026 09:40:39 GMTSalesforceKlueOauth AbuseSupply Chain AttackData ExposureMcGraw-Hill Data Breach: Salesforce Misconfiguration Exploitedhttps://runtimerebel.com/blog/mcgraw-hill-data-breach-salesforce-misconfiguration-exploitedhttps://runtimerebel.com/blog/mcgraw-hill-data-breach-salesforce-misconfiguration-exploitedMcGraw-Hill confirms a data breach after threat actors exploited a Salesforce misconfiguration, exposing internal records and student information.Tue, 14 Apr 2026 20:25:19 GMTMcGraw HillSalesforceMogilevichMisconfigurationData ExfiltrationSecure Salesforce Cloud: Restricting Guest User Permissionshttps://runtimerebel.com/blog/secure-salesforce-cloud-restricting-guest-user-permissionshttps://runtimerebel.com/blog/secure-salesforce-cloud-restricting-guest-user-permissionsRuntime Rebel analyzes critical Salesforce guest user misconfigurations exposing sensitive client data.Wed, 11 Mar 2026 00:32:44 GMTSalesforceCloud SecurityMisconfigurationGuest UserData ExposureIdentity and Access ManagementSalesforce Experience Cloud Mass-Scanning via Modified AuraInspectorhttps://runtimerebel.com/blog/salesforce-experience-cloud-mass-scanning-via-modified-aurainspectorhttps://runtimerebel.com/blog/salesforce-experience-cloud-mass-scanning-via-modified-aurainspectorThreat actors use a modified AuraInspector tool to exploit Salesforce Experience Cloud misconfigurations, exposing sensitive guest user data.Tue, 10 Mar 2026 08:16:45 GMTSalesforceExperience CloudAuraInspectorMisconfigurationData Exposure