Skip to content
Threat Feed
Subscribe

Product

Salesforce LWR

1 brief RSS
high advisory

City-Forum Campaign Targeting Salesforce and ServiceNow Guest Access

An unidentified threat actor is leveraging a custom multi-platform toolset to exploit misconfigured guest user permissions in Salesforce and ServiceNow, performing high-volume data enumeration and exfiltration.

Salesforce Aura +2 data-exfiltration cloud-security reconnaissance guest-access-abuse
2t 2i