Salesforce Agentforce intake can pass public email into agent prompts
Researchers say standard Email-to-Case and Flows can reach agent actions without a misconfiguration.
58
Vendor
Salesforce
- Mentions · 7d0
- Mentions · 30d6
- All mentions29
- First seenAug 12, 2026
- Last mentioned11d ago
Timeline
29 articles · newest firstYour AI Agent Doesn’t Have MFA
Report says AI agents lack MFA and have already misused credentials and spread malware.
66
Silicon Valley is falling in line with Trump’s attempt to rename AI
Tech CEOs including Nadella, Huang, Musk, and Benioff adopt Trump’s “super intelligence” renaming of AI.
32
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
About 1,000 of 1,280 AI-embedded products bypass SSO, so inherited agents escape identity governance.
45
FBI arrests another suspected ShinyHunters hacker after agency breach
FBI arrested another suspected ShinyHunters member linked to the recent breach of an FBI jobs platform.
81
ShinyHunters hacker reportedly detained in Jordan, aiding FBI
Jordan reportedly detained ShinyHunters suspect Saif al-Din Khader, who is helping the FBI find other members.
67
One Bad Prompt Took Down a Company’s Salesforce: RSA’s Jim Taylor on Agent ID and Taming the 4,000 Shadow AI Agents Hiding in Your Enterprise
RSA launched Agent ID to discover, secure, and govern enterprise AI agents after finding thousands of shadow agents.
62
Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog
Nvidia launched an agent safety platform pairing OpenShell sandboxing with a BlueField-4 hardware watchdog.
64
Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
Zenity disclosed patched zero-click prompt-injection flaws in Salesforce Agentforce that could exfiltrate CRM data.
68
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
Salesforce Agentforce flaws dubbed SalesBleed let poisoned Web-to-Lead forms exfiltrate CRM data and phish via Slack.
76
Salesforce Indirect Prompt Injection Vulnerability Enables 0-click Data Exfiltration
Zenity disclosed SalesBleed, a patched Agentforce flaw enabling zero-click CRM theft via prompt injection.
74
Salesforce Agentforce Flaw Enables 0-Click Data Exfiltration via Prompt Injection
Zenity's SalesBleed shows a zero-click Agentforce prompt injection that can leak Salesforce CRM data via DNS.
68
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Salesbleed uses Salesforce AI agents to smuggle web instructions into trusted Slack phishing messages.
64
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
Zenity Labs found Salesforce Agentforce flaws, called SalesBleed, enabling zero-click CRM theft and agent-identity phishing.
77
Salesforce Agentforce: Bridging the Enterprise AI Gap from ‘Vibe Coding’ to Battle-Tested Orchestration
Salesforce pitches Agentforce as an enterprise agent platform with testing, observability, and deterministic gating; Southwest Airlines reports $6M annual savings and 45% autonomous resolution.
30
Snap tries to make the case again for its $2,200 smart glasses
Snap unveiled new features for its $2,200 Specs smart glasses, including an anticipatory AI system and enterprise partnerships with Amazon, Salesforce, and Nvidia.
25
AI is changing what Salesforce security needs to govern
WithSecure's Trust Mapping paper proposes a framework for governing trust relationships across Salesforce workflows, AI agents, integrations and connected SaaS systems.
25
Slack can now vibe-code interactive charts and reports inside chats
Slack launched Slackforce Surfaces, letting Slackbot build interactive dashboards, reports, and microsites directly inside chat channels.
45
AI research startup Listen Labs scrubbed a $1.5B funding round for Salesforce talks
Listen Labs abandoned a signed $125M Series C term sheet at a $1.5B valuation amid acquisition talks with Salesforce at roughly $2 billion.
48
McKesson copes with fallout from data theft extortion attack
McKesson discloses a data theft extortion attack by ShinyHunters affecting oncology and medical-surgical customers, with a reported $55 million demand.
80
ShinyHunters claims it stole 284 million patient records from McKesson
ShinyHunters claims theft of 284 million patient records from McKesson via vishing, Okta takeover, and Salesforce/Snowflake access, demanding $55,236,150.
88
Over 8,300 Gitea servers vulnerable to code execution attacks
Over 8,300 internet-facing Gitea servers are exposed to active exploitation of CVE-2026-60004, an authenticated code injection flaw enabling arbitrary code execution.
72
One in four MCP servers opens AI agent security to code execution risk
Noma Security whitepaper finds most popular AI Skills and many MCP servers carry high-risk capabilities, with state changes most prevalent.
62
AWS limits AI agents’ data access, even when manipulated
AWS detailed propagating user authorization context through Bedrock AgentCore so downstream services enforce access controls even if the agent is manipulated via prompt injection.
48
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories
A weekly bulletin aggregating short security updates, including the City-Forum data-theft campaign, a ShipMonk breach, a Cursor CLI flaw, and GhostJacking AI attacks.
30
One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
Reco tracks the City Forum campaign: one Contabo VPS has scraped Salesforce and ServiceNow guest portals across finance, telecom and public sector since March 2025.
68
153GB of stolen credentials surface after LiteLLM supply chain attack
153GB archive from the LiteLLM supply chain attack exposes secrets from about 2,500 companies, including AWS, Samsung, Cisco and Salesforce.
90
A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months
Reco tracks City-Forum, an actor abusing Salesforce and ServiceNow guest-user access from one IP for 17 months to enumerate portal data.
62
KlueセキュリティインシデントとRecorded Futureへの影響
Recorded Future disclosed a Klue incident that exposed some Salesforce business data, including contacts and emails, via a compromised OAuth token.
46
Related CVEs
by mentions- CVE-2026-6000424%9.8Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
Appears with
- Salesforceorganization · 9
- Agentforceproduct · 9
- Salesforceproduct · 7
- ShinyHuntersthreat actor · 6
- Slackproduct · 6
- Microsoftvendor · 5
- Oktavendor · 5
- Zenity Labsorganization · 5
- Amazonvendor · 4
- Nvidiavendor · 4
- Ciscovendor · 3
- Oraclevendor · 3
- FBIorganization · 3
- Recovendor · 3
- OWASPorganization · 3
- Salesforce Experience Cloudproduct · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.