Search: “salesforce”

10 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 153 Data breach 121 Industry 120 Vulnerability 98 Policy & legal 98 Threat actor 44 Phishing & fraud 42 Exploit / PoC 39 Malware 32 AI tools & infra 29 AI safety & security 16 AI industry 16 Advisory 14 Research 10

SeverityAll critical 354 high 168 medium 96 low 166 info 67

AI is changing what Salesforce security needs to govern

WithSecure's Trust Mapping paper proposes a framework for governing trust relationships across Salesforce workflows, AI agents, integrations and connected SaaS systems.

WithSecure's paper 'Navigating Trust in the Modern Salesforce Ecosystem' introduces a Trust Mapping Framework spanning five domains: entities, information, connections, actions and system outcomes. It applies to Salesforce, Agentforce, Headless 360, third-party SaaS and AI-assisted workflows where users, AI agents, APIs and integrations form trust relationships. A Discovery step maps relationships, a Governance step assesses, restricts or retires them, and the paper defines 'trust drift' such as stale credentials, excessive access and unvalidated AI recommendations.

Help Net SecuritySep 11, 04:30 UTC · 6d agoResearch1

Onfido unveils identity verification service for Salesforce Financial Services Cloud

Help Net SecurityMay 2, 00:00 UTC · May 2, 2023Research

Box Sign delivers unlimited signatures to customers at no additional cost

Help Net SecurityJul 28, 00:00 UTC · Jul 28, 2021Research

Security teams have no control over risky SaaS-to-SaaS connections

Help Net SecurityFeb 28, 00:00 UTC · Feb 28, 2023Research

How today's workforce stays secure and what apps it prefers

Help Net SecurityDec 14, 14:30 UTC · Dec 14, 2023Research1

Box Sign now helps customers move more of their transactions to the cloud

Help Net SecuritySep 6, 00:00 UTC · Sep 6, 2022Research

Mapping out your unknown: A threat hunter’s guide to GitHub

Datadog Security Labs publishes a threat-hunting guide with audit-log queries to detect GitHub token theft, device code phishing, and source code exfiltration.

Datadog's threat-hunting guide covers GitHub audit log queries for detecting compromised accounts, stolen personal access tokens, and malicious OAuth app authorizations. Attackers typically obtain credentials through phishing, credential stuffing, leaked secrets, or device code phishing, then map private repositories, exfiltrate source code, and pivot into connected cloud and CI/CD environments. The guide maps detections to MITRE techniques like T1078 and T1528 and documents GitHub logging quirks affecting attribution, token metadata, and visibility fields.

Datadog Security LabsSep 16, 00:00 UTC · 1d agoResearch in the wild1