tldrdailynews.com logo

ShinyHunters claim new Salesforce Aura breach via misconfigured guest access

1 min read
Source: BleepingComputer
ShinyHunters claim new Salesforce Aura breach via misconfigured guest access
Photo: BleepingComputer
TL;DR

Salesforce warns customers that misconfigured Experience Cloud guest access can let unauthenticated visitors query CRM data, while ShinyHunters claims to be exploiting a bug with a modified AuraInspector to steal data. Salesforce stresses there is no platform flaw and urges admins to audit guest permissions, set org defaults to private, disable API access for guest profiles, turn off self-registration, and monitor Aura Event Monitoring. Mandiant confirms AuraInspector misuse and notes that detection in logs does not guarantee a breach.

Topics:technologysecurity#aura#data-theft#experience-cloud#guest-access#security#shinyhunters
Share this article
  1. ShinyHunters claims ongoing Salesforce Aura data theft attacks  BleepingComputer
  2. Hundreds of Salesforce Customers Allegedly Targeted in New Data Theft Campaign  SecurityWeek
  3. 'Overly Permissive' Salesforce Cloud Configs in the Crosshairs  Dark Reading | Security
  4. Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool  The Hacker News
  5. ShinyHunters claims more high-profile victims in latest Salesforce customers data heist  theregister.com

Want the full story? Read the original reporting

Read on BleepingComputer