Tag: saas security

2 Attack Reports | 0 Vulnerabilities

Attack reports

Beaches and breaches

Recent cybersecurity news has shifted focus from AI and ransomware to breaches, particularly those involving compromised OAuth tokens linked to Salesloft's Drift integration. The main themes emerging are supply chain and identity attacks, with a need to redefine these concepts in the context of Saa…
data breaches
cyber threat intelligence
saas security
oauth tokens
2025-09-12
identity attacks
nefilim
cybersecurity trends
lockergoga
megacortex
supply chain attacks
cti-cmm
Published: September 12, 2025
Downloadable IOCs: 0

Google Salesforce Breach: A Deep dive into the chain and extent of the compromise

In June 2025, Google's Salesforce instance was breached by UNC6040 & UNC6240 using vishing, OAuth app abuse, and anonymity layers. The attackers stole business data of small and medium-sized clients. A parallel attack by UNC6395 compromised Salesloft Drift's Salesforce integration, affecting hundre…
social engineering
vishing
cloud security
data exfiltration
tor
oauth
2025-09-03
salesforce
saas security
Published: September 3, 2025
Downloadable IOCs: 19
Click here to see more Attack Reports