#salesforce


One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

Aug 18, 2026 // 14:36

A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according […]

“City-Forum” data-theft attacks target Salesforce, ServiceNow portals

Aug 13, 2026 // 02:17

An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals.  The data-theft campaign, […]

Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity

Jul 14, 2026 // 11:46

Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting a single flaw […]

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data

Jun 19, 2026 // 12:11

Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security incident impacting the competitive intelligence company […]

Klue OAuth breach linked to ‘Icarus’ Salesforce data theft attacks

Jun 18, 2026 // 19:37

Market intelligence platform Klue suffered a OAuth breach that enabled the “Icarus” threat actors to steal Salesforce CRM data from multiple organizations in an ongoing […]

ShinyHunters Exploits Salesforce Experience Cloud for Massive Data Heist

Mar 9, 2026 // 23:12

The threat actor group ShinyHunters (also tracked as UNC6040/UNC6240) has claimed responsibility for a new wave of data theft attacks targeting Salesforce Experience Cloud (formerly Community Cloud) sites using the Aura framework. […]