Salesforce CLI Installer Vulnerability Exposes Users to Potential Attacks

A critical vulnerability has been discovered in the Salesforce CLI installer, posing significant security risks to users. This flaw allows attackers to exploit the installation process, potentially leading to unauthorized access and system compromise. Salesforce, a leading customer relationship management platform, has acknowledged the issue and is working on a patch to mitigate the threat. The vulnerability highlights the importance of securing software supply chains and installer packages, as attackers increasingly target these vectors to infiltrate systems. Users are advised to update their Salesforce CLI installations promptly once the fix is released and to follow best practices for software installation and verification. This incident serves as a reminder for organizations to maintain vigilant cybersecurity hygiene and monitor for unusual activities related to software tools and development environments.

This Cyber News was published on cybersecuritynews.com. Publication date: Wed, 24 Sep 2025 10:45:20 +0000

Cyber News related to Salesforce CLI Installer Vulnerability Exposes Users to Potential Attacks

Salesforce Lays-Off 700 Staff - American CRM giant Salesforce is reportedly reducing its workforce again, on top of a sizeable reduction back in 2023. The Wall Street Journal reported that Salesforce is laying off 700 workers, or 1 percent of its workforce, in the latest round of ...
1 year ago Silicon.co.uk

Inside the strategy of Salesforce's new Chief Trust Officer - In this Help Net Security interview, Arkin discusses a collaborative approach to building trust among customers, employees, and stakeholders, focusing on transparency, shared responsibility, and empowering others to integrate trusted and responsible ...
1 year ago Helpnetsecurity.com

ShinyHunters behind Salesforce data theft attacks at Qantas, Allianz Life, and LVMH - A wave of data breaches impacting companies like Qantas, Allianz Life, LVMH, and Adidas has been linked to the ShinyHunters extortion group, which has been using voice phishing attacks to steal data from Salesforce CRM instances. These breaches have ...
4 months ago Bleepingcomputer.com Hunters Scattered Spider

CVE-2021-29504 - WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communication to remotely disable the certificate ...
4 years ago

Salesforce CLI Installer Vulnerability Exposes Users to Potential Attacks - A critical vulnerability has been discovered in the Salesforce CLI installer, posing significant security risks to users. This flaw allows attackers to exploit the installation process, potentially leading to unauthorized access and system ...
3 months ago Cybersecuritynews.com CVE-2024-XXXX

9 Best DDoS Protection Service Providers for 2024 - eSecurity Planet content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More. One of the most powerful defenses an organization can employ against distributed ...
2 years ago Esecurityplanet.com

Wordfence CLI 2.1.0 Adds Email Capability and Unattended Configuration - We've just released Wordfence CLI 2.1.0 which includes two exciting new capabilities. Wordfence CLI can now email you a summary of scan results for both the malware scan and the vulnerability scan. These emails can be sent directly, or via an SMTP ...
2 years ago Wordfence.com

Salesforce Attacks: Latest Threats and Security Measures - Salesforce, a leading customer relationship management platform, has increasingly become a target for cyber attackers. This article delves into the latest Salesforce attacks, highlighting the methods threat actors use to exploit vulnerabilities and ...
3 months ago Cybersecuritynews.com CVE-2023-34362 CVE-2023-34363 UNC2452

Salesforce Releases Forensic Investigation Guide - Salesforce has published a comprehensive Forensic Investigation Guide aimed at helping organizations effectively investigate security incidents within their Salesforce environments. This guide provides detailed methodologies, best practices, and ...
3 months ago Cybersecuritynews.com

Allianz Life confirms data breach impacts majority of 1.4 million customers - ShinyHunters is a group of threat actors who are linked to multiple high-profile data breaches and attacks, including those against PowerSchool and the SnowFlake attacks, which ...
5 months ago Bleepingcomputer.com Hunters

Microsoft fixes critical Azure CLI flaw that leaked credentials in logs - Microsoft has fixed a critical security vulnerability that could let attackers steal credentials from GitHub Actions or Azure DevOps logs created using Azure CLI. The vulnerability was reported by security researchers with Palo Alto's Prisma Cloud. ...
2 years ago Bleepingcomputer.com

CVE-2024-52308 - The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0. Developers connect to ...
1 year ago Tenable.com

Scattered Lapsus Hunters Returns With Salesforce Leak Site - The Lapsus$ hacking group, known for its high-profile cyberattacks, has resurfaced with a new leak site targeting Salesforce, a major cloud software company. This resurgence follows a period of inactivity and signals a renewed threat to enterprise ...
2 months ago Darkreading.com Lapsus$

The Biggest Tech Talent Gap Can Be Found in the SAP Ecosystem - They're not just looking for people who can write code; they want individuals who can implement, integrate, and run a variety of software platforms crucial for modern businesses. A recent Forbes case study explored dynamic areas like cybersecurity, ...
1 year ago Cysecurity.news

ShinyHunters claims 1.5 billion Salesforce records stolen in Drift hacks - In a significant cybersecurity incident, the hacking group ShinyHunters has claimed responsibility for stealing 1.5 billion Salesforce records through breaches involving the company Drift. This massive data breach highlights the increasing risks ...
3 months ago Bleepingcomputer.com ShinyHunters

FBI Warns of Threat Actors Targeting Salesforce Customers - The FBI has issued a warning about threat actors targeting Salesforce customers through sophisticated cyberattacks. These threat actors exploit vulnerabilities and use social engineering tactics to gain unauthorized access to Salesforce environments, ...
3 months ago Darkreading.com

Salesforce deepens AI ties with OpenAI, Anthropic to power AgentForce platform in 2025 - Salesforce has announced a strategic expansion of its AI partnerships with leading firms OpenAI and Anthropic to enhance its AgentForce platform, set to launch in 2025. This collaboration aims to integrate advanced AI capabilities into Salesforce's ...
2 months ago Reuters.com

Critical Flaw in Salesforce AgentForce Extension Exposes Data to Attackers - A critical security vulnerability has been discovered in the Salesforce AgentForce browser extension, which is widely used by customer service teams to enhance productivity. This flaw could allow attackers to access sensitive customer data and ...
3 months ago Infosecurity-magazine.com

ShinyHunters starts leaking data stolen in Salesforce attacks - ShinyHunters, a notorious cybercriminal group, has begun leaking data stolen from recent Salesforce attacks. This development marks a significant escalation in the ongoing cyber threats targeting major cloud service providers. The leaked data ...
2 months ago Bleepingcomputer.com ShinyHunters

Salesloft breached to steal OAuth tokens for Salesforce data theft attacks - Salesloft, a sales engagement platform, suffered a security breach where attackers stole OAuth tokens to access Salesforce data. This incident highlights the increasing risks associated with OAuth token theft, which can lead to unauthorized access to ...
4 months ago Bleepingcomputer.com

SalesLoft March GitHub repo breach led to Salesforce data theft attacks - In March 2024, SalesLoft experienced a significant security breach when attackers accessed a GitHub repository, leading to a data theft incident targeting Salesforce customers. The breach exposed sensitive information that threat actors leveraged to ...
3 months ago Bleepingcomputer.com

Data theft campaign targets Salesforce users with malicious Excel files - A recent data theft campaign has been targeting Salesforce users by distributing malicious Excel files designed to steal sensitive information. The attackers leverage social engineering tactics to trick victims into opening these files, which then ...
3 months ago Infosecurity-magazine.com

CVE-2023-22094 - Vulnerability in the MySQL Installer product of Oracle MySQL (component: Installer: General). Supported versions that are affected are Prior to 1.6.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure ...
2 years ago