Sunday 26 July 2026 13:10:36 GMT+02:00
Netcrook
#Salesforce OAuth
Salesforce Trust Becomes the Breach Path in a Long-Running Theft Pattern
Microsoft mapped a year-long campaign tied to ShinyHunters-linked activity that appears to have moved through OAuth trust rather than a Salesforce platform flaw.
When a Trusted App Becomes the Breach Path
A Salesforce OAuth trust relationship can outlive the login that created it, letting attackers move through CRM data without repeatedly facing MFA.
How a Compromised Klue Integration Could Turn Salesforce Into an Exfiltration Channel
A reported abuse of OAuth-linked SaaS trust shows how one third-party integration can become a quiet path to CRM data.