With attackers exploiting trust in apps, integrations and users to gain access that looks legitimate, organizations must rethink their approach beyond traditional tools.

[WASHINGTON] Salesforce said on Thursday (Nov 20) that it is investigating “unusual activity” involving Gainsight-published applications that may have exposed customer data. In a brief statement ...

Salesforce says it revoked refresh tokens linked to Gainsight-published applications while investigating a new wave of data theft attacks targeting customers. The cloud-based software company noted ...

Salesforce said on Wednesday that it’s investigating a breach of “certain customers’ Salesforce data” that was compromised through apps published by Gainsight, a company that sells a platform for ...

Gainsight apps enabled unauthorized Salesforce data access, prompting token revocation and AppExchange removal Incident linked to August 2025 Salesloft breach, where OAuth tokens exposed 1.5 billion ...

Google has confirmed that hackers have stolen the Salesforce-stored data of more than 200 companies in a large-scale supply chain hack. On Thursday, Salesforce disclosed a breach of “certain customers ...

In October, Salesforce forecast revenue of more than $60 billion in 2030, above market estimates, as it works to expand ...

WIRTE expands AshTag espionage operations, using phishing & DLL sideloading to target Middle East govts with persistent ...

GrayBravo drives four CastleLoader threat clusters using phishing, malvertising, and Booking-themed lures across multiple ...

MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook.

New Fooder loader and memory-only tactics suggest MuddyWater has evolved from its usual noisy ops to more stealthy espionage operations.

Several ransomware groups have been spotted using a packer-as-a-service (PaaS) platform named Shanya to assist in EDR ...