Salesloft Drift Breach Affects Salesforce and Beyond
TL;DR
A threat actor exploited a vulnerability in the Salesloft Drift integration to exfiltrate sensitive Salesforce data using compromised OAuth credentials, prompting immediate security measures and urging organizations to review logs, rotate credentials, and enhance threat hunting efforts.
Topics:businesssecurity#data-exfiltration#drift-integration#salesforce-compromise#salesloft#security#threat-response
- Threat Brief: Salesloft Drift Integration Used To Compromise Salesforce Instances Unit 42
- The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft Krebs on Security
- Google Warns Salesloft Drift Breach Impacts All Drift Integrations Beyond Salesforce The Hacker News
- Palo Alto Networks, Zscaler customers impacted by supply chain attacks Yahoo Finance
- Zscaler Customer Info Taken in Salesloft Breach Infosecurity Magazine
Want the full story? Read the original reporting
Read on Unit 42