Contributor urges zero standing privilege for machine identities
A cited survey found 109 machine identities per human and 61% of privileged requests still standing.
28
Product
Salesforce
- Mentions · 7d0
- Mentions · 30d5
- All mentions15
- First seenAug 12, 2026
- Last mentioned12d ago
Timeline
15 articles · newest firstClaude can now generate animated explainer videos and live data dashboards from text prompts
Anthropic launched Claude Dashboards and Motion betas that turn prompts into live dashboards and animated videos.
58
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
Malwarebytes says BlueKit PhaaS lets criminals launch brand-phishing sites and steal sessions in about ten minutes.
63
ShinyHunters hacker reportedly detained in Jordan, aiding FBI
Jordan reportedly detained ShinyHunters suspect Saif al-Din Khader, who is helping the FBI find other members.
67
The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
NordLayer argues browser-based SaaS attacks, including AiTM phishing and malicious extensions, often evade traditional EDR.
34
One Bad Prompt Took Down a Company’s Salesforce: RSA’s Jim Taylor on Agent ID and Taming the 4,000 Shadow AI Agents Hiding in Your Enterprise
RSA launched Agent ID to discover, secure, and govern enterprise AI agents after finding thousands of shadow agents.
62
Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
Zenity disclosed patched zero-click prompt-injection flaws in Salesforce Agentforce that could exfiltrate CRM data.
68
Show HN: Aclif – Agent CLI framework: one grammar, canonical names across SaaS
Aclif launched an agent CLI framework giving AI agents one grammar and canonical names to operate SaaS platforms like Salesforce and ServiceNow.
25
GhostCode Abuses Microsoft Entra Device Enrollment to Maintain Access After Token Revocation
eSentire exposes GhostCode, a device-code phishing kit that abuses Microsoft Entra device enrollment to persist even after stolen tokens are revoked.
73
Passkey-themed phishing attacks lead to Microsoft 365 data theft
Microsoft links ShinyHunters- and Helix-affiliated actors to passkey-themed vishing and device-code phishing that compromises Microsoft 365 accounts and steals cloud data.
78
AI is changing what Salesforce security needs to govern
WithSecure's Trust Mapping paper proposes a framework for governing trust relationships across Salesforce workflows, AI agents, integrations and connected SaaS systems.
25
Slack can now vibe-code interactive charts and reports inside chats
Slack launched Slackforce Surfaces, letting Slackbot build interactive dashboards, reports, and microsites directly inside chat channels.
45
ShinyHunters claims it stole 284 million patient records from McKesson
ShinyHunters claims theft of 284 million patient records from McKesson via vishing, Okta takeover, and Salesforce/Snowflake access, demanding $55,236,150.
88
Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day
Weekly digest: exploited Metabase zero-day breached Framework; Salesforce/ServiceNow portals read for 17 months; Microsoft patched 400+ flaws.
32
KlueセキュリティインシデントとRecorded Futureへの影響
Recorded Future disclosed a Klue incident that exposed some Salesforce business data, including contacts and emails, via a compromised OAuth token.
46
Related CVEs
by mentions- CVE-2026-203491%8.6Unauthenticated Remote DoS in Cisco ASA/FTD SSL VPN Service
- CVE-2026-1857715%8.2Authentication Bypass and Account Takeover in N-able N-central (Incomplete Patch)
- CVE-2026-688209%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
Appears with
- Salesforcevendor · 7
- Microsoftvendor · 5
- Salesforceorganization · 3
- ShinyHuntersthreat actor · 3
- Amazonvendor · 2
- Microsoft Entra IDproduct · 2
- Anthropicorganization · 2
- Oktavendor · 2
- UNC6395threat actor · 2
- Ciscovendor · 2
- Salesloftorganization · 2
- Claudeproduct · 2
- Snowflakeproduct · 2
- Agentforceproduct · 2
- Microsoft 365product · 2
- Claudeai model · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.