Wyndham Android app password exposed customer data in Salesforce
A researcher found the password in the app source, unlocking names, emails, member numbers, login tokens, and files.
Stories per day · 30 days
3 RSS
Relatedandroid2customer-data2hardcoded-credentials2prompt-injection2wyndham2agentforce1agent-security1ai-agent1ai-agents1benchmarks1credential-abuse1crm1crm-agent-bench1mfa1multi-turn-agents1servicenow1shai-hulud1snowflake1
29 stories, newest first · one card per story
Stories tagged #salesforce
WorkOS reports security breach in GTM systems
Attack from ARTEX AI framework accessed Salesforce and Snowflake, exposing business contact data.
1
CRM-Agent-Bench tests tool-using agents on 555 CRM tasks
Sixteen systems score 64.32% to 83.60% strict success, with leaders diverging sharply in cost and domain reliability.
Salesforce Agentforce intake can pass public email into agent prompts
Researchers say standard Email-to-Case and Flows can reach agent actions without a misconfiguration.
3
Your AI Agent Doesn’t Have MFA
Report says AI agents lack MFA and have already misused credentials and spread malware.
7
Silicon Valley is falling in line with Trump’s attempt to rename AI
Tech CEOs including Nadella, Huang, Musk, and Benioff adopt Trump’s “super intelligence” renaming of AI.
2
TikTok rolls out an AI shopping assistant and one-click checkout
TikTok launched a conversational AI shopping assistant and one-click checkout in the For You feed.
2
ShinyHunters hacker reportedly detained in Jordan, aiding FBI
Jordan reportedly detained ShinyHunters suspect Saif al-Din Khader, who is helping the FBI find other members.
4
One Bad Prompt Took Down a Company’s Salesforce: RSA’s Jim Taylor on Agent ID and Taming the 4,000 Shadow AI Agents Hiding in Your Enterprise
RSA launched Agent ID to discover, secure, and govern enterprise AI agents after finding thousands of shadow agents.
6
Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
Zenity disclosed patched zero-click prompt-injection flaws in Salesforce Agentforce that could exfiltrate CRM data.
2
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
Salesforce Agentforce flaws dubbed SalesBleed let poisoned Web-to-Lead forms exfiltrate CRM data and phish via Slack.
3
Salesforce Indirect Prompt Injection Vulnerability Enables 0-click Data Exfiltration
Zenity disclosed SalesBleed, a patched Agentforce flaw enabling zero-click CRM theft via prompt injection.
3
Salesforce Agentforce Flaw Enables 0-Click Data Exfiltration via Prompt Injection
Zenity's SalesBleed shows a zero-click Agentforce prompt injection that can leak Salesforce CRM data via DNS.
3
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Salesbleed uses Salesforce AI agents to smuggle web instructions into trusted Slack phishing messages.
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
Zenity Labs found Salesforce Agentforce flaws, called SalesBleed, enabling zero-click CRM theft and agent-identity phishing.
1
Canva hacked via vendor’s Salesforce instance; Other customers affected as well
Extortion group 'The Seven Deadly Sins' lists Canva on new leak site after attacking the design firm via a vendor's Salesforce instance.
Salesforce Agentforce: Bridging the Enterprise AI Gap from ‘Vibe Coding’ to Battle-Tested Orchestration
Salesforce pitches Agentforce as an enterprise agent platform with testing, observability, and deterministic gating; Southwest Airlines reports $6M annual savings and 45% autonomous resolution.
10
Show HN: Aclif – Agent CLI framework: one grammar, canonical names across SaaS
Aclif launched an agent CLI framework giving AI agents one grammar and canonical names to operate SaaS platforms like Salesforce and ServiceNow.
‘Now We Can Know Everything and Do Anything,’ Jensen Huang Says at Dreamforce
Salesforce unveiled Koa, its first CRM reasoning model post-trained on NVIDIA Nemotron 3 Super, announced during Jensen Huang's Dreamforce keynote.
2
Salesforce and Nvidia’s new reasoning model is everything the AI labs should fear
Salesforce and Nvidia launch Koa, Salesforce's first reasoning model, built on Nvidia's open-weight Nemotron and post-trained on synthetic sales and support data.
3
AI is changing what Salesforce security needs to govern
WithSecure's Trust Mapping paper proposes a framework for governing trust relationships across Salesforce workflows, AI agents, integrations and connected SaaS systems.
2
Slack can now vibe-code interactive charts and reports inside chats
Slack launched Slackforce Surfaces, letting Slackbot build interactive dashboards, reports, and microsites directly inside chat channels.
6
AI research startup Listen Labs scrubbed a $1.5B funding round for Salesforce talks
Listen Labs abandoned a signed $125M Series C term sheet at a $1.5B valuation amid acquisition talks with Salesforce at roughly $2 billion.
2
ShinyHunters claims it stole 284 million patient records from McKesson
ShinyHunters claims theft of 284 million patient records from McKesson via vishing, Okta takeover, and Salesforce/Snowflake access, demanding $55,236,150.
2