Salesforce Agentforce AI Agent Vulnerability

By Editorial Team | September 30, 2026
Salesforce Agentforce AI agent vulnerability let a web form hijack CRM data with zero clicks. Patched already, but the pattern will repeat elsewhere.

A Salesforce Agentforce AI agent vulnerability, publicly disclosed September 24 by research firm Zenity Labs under the name “SalesBleed,” let an attacker plant a hidden instruction in an ordinary sales lead form and later exfiltrate CRM data with zero clicks, once an employee simply asked their AI agent to look at the newest lead. Salesforce…

Read More

McKesson Breach: How the Okta Vishing Attack Happened

By Editorial Team | September 2, 2026
An Okta vishing attack gave ShinyHunters access to McKesson's Salesforce and Snowflake data, followed by a $55 million ransom demand.

An Okta vishing attack — a phone call, not a piece of malware — is how the extortion group ShinyHunters claims it broke into US healthcare and pharmaceutical distribution giant McKesson. McKesson has confirmed unauthorized access to third-party applications and data exfiltration, but has not confirmed the attack path itself: according to ShinyHunters’ own account,…

Read More