Salesforce Aura: Legacy Framework
Salesforce Aura is a legacy UI framework used in Experience Cloud. Attackers have historically abused Aura-based guest requests to enumerate objects and…
Tag: Salesforce
Salesforce Lightning Web Runtime: Modern Framework
Salesforce Lightning Web Runtime is the newer framework for Experience Cloud sites. The City Forum attacker exploited its UI-API data layer, which…
Salesforce Event Monitoring: Security Monitoring Tool
Salesforce Event Monitoring provides logs and analytics for security monitoring. It can be used to detect suspicious activity like the City Forum…
Salesforce Shield: Security and Compliance Suite
Salesforce Shield offers enhanced security, audit, and compliance features. It includes Event Monitoring capabilities that help detect and respond to threats like…
One Attacker Scrapes Salesforce and ServiceNow Portals Since 2025
A single threat actor has been systematically scraping data from Salesforce and ServiceNow customer portals for over a year, according to research…
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 13 More Stories
This week's ThreatsDay Bulletin covers a wide range of cybersecurity developments, including new attack techniques, data breaches, and product updates. Key highlights…
Salesforce Experience Cloud: Portal and Community Platform
Salesforce Experience Cloud enables organizations to build customer and partner portals. Its guest user feature, when misconfigured, can expose data to unauthenticated…
Device Code Phishing: The Fastest-Growing Threat of 2026 and How to Defend Against It
Device code phishing, which abuses the OAuth 2.0 device authorization grant to steal access tokens, has rapidly evolved from a niche technique…
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
Salesforce disabled the Klue Battlecards app integration after detecting unusual activity that led to unauthorized access to customer data via OAuth token…
ShinyHunters: Notorious Data Breach Group
ShinyHunters is a well-known threat actor group infamous for large-scale data breaches and selling stolen data. They have previously exploited Salesforce guest…