salesforce

Attackers abused a compromised legacy Klue credential to mint Salesforce OAuth tokens and pull CRM records over roughly 24 hours. Salesforce disabled the Battlecards app on June 17.

Instructure says names, email addresses, student IDs and user messages were exposed in a breach disclosed May 1. ShinyHunters then listed the firm on its leak site, claiming 3.65 TB of data tied to 275 million people at close to 9,000 institutions.

Home security giant ADT says attackers detected on April 20 stole names, phone numbers and addresses for 5.5 million customers after voice-phishing an employee's Okta single sign-on. ShinyHunters published an 11GB archive when the company refused to pay.

At TrailblazerDX 2026, Salesforce unveiled Headless 360, exposing its full platform as APIs, MCP tools, and CLI commands so AI coding agents can build and operate on Salesforce without a browser.

OpenAI unveiled workspace agents on April 22 — shared, always-on Codex-powered agents that operate inside ChatGPT Business, Enterprise, Edu, and Teachers plans, with native integrations for Slack, Salesforce, Google Drive, and SharePoint.

The ShinyHunters cybercrime group says it exploited misconfigured Salesforce Experience Cloud guest accounts to steal data from nearly 400 organizations using a modified version of Mandiant's AuraInspector tool.

OpenAI unveils Frontier, an orchestration platform for managing hundreds of autonomous AI agents across enterprise workflows, backed by a $200M Snowflake deal and Fortune 500 early adopters — intensifying pressure on traditional SaaS vendors.