
Salesforce Agentforce intake can pass public email into agent prompts
Researchers say standard Email-to-Case and Flows can reach agent actions without a misconfiguration.
10 stories, newest first · one card per story

Researchers say standard Email-to-Case and Flows can reach agent actions without a misconfiguration.

Zenity disclosed patched zero-click prompt-injection flaws in Salesforce Agentforce that could exfiltrate CRM data.

Salesforce Agentforce flaws dubbed SalesBleed let poisoned Web-to-Lead forms exfiltrate CRM data and phish via Slack.

Zenity disclosed SalesBleed, a patched Agentforce flaw enabling zero-click CRM theft via prompt injection.

Zenity's SalesBleed shows a zero-click Agentforce prompt injection that can leak Salesforce CRM data via DNS.
Zenity Labs found Salesforce Agentforce flaws, called SalesBleed, enabling zero-click CRM theft and agent-identity phishing.

Salesforce pitches Agentforce as an enterprise agent platform with testing, observability, and deterministic gating; Southwest Airlines reports $6M annual savings and 45% autonomous resolution.

Salesforce unveiled Koa, its first CRM reasoning model post-trained on NVIDIA Nemotron 3 Super, announced during Jensen Huang's Dreamforce keynote.

Salesforce and Nvidia launch Koa, Salesforce's first reasoning model, built on Nvidia's open-weight Nemotron and post-trained on synthetic sales and support data.

WithSecure's Trust Mapping paper proposes a framework for governing trust relationships across Salesforce workflows, AI agents, integrations and connected SaaS systems.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views