#mandiant-investigation

[ follow ]
#gainsight #salesforce-breach #third-party-integration #github-compromise #oauth-token-theft #unc6395
Information security
fromTechzine Global
1 week ago

Salesforce data once again leaked via third-party application

Third-party Gainsight integrations exposed Salesforce customer data, affecting hundreds of instances; Gainsight, Salesforce, and Google Mandiant are investigating while asserting no Salesforce vulnerability.
Information security
fromIT Pro
2 months ago

Salesloft Drift hackers had access to company GitHub account for months before attacks

Threat actors accessed Salesloft's GitHub for months, exfiltrated secrets and tokens, then used Drift integrations' OAuth tokens to access customer data.
[ Load more ]