PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Salesforce-Connected Third-Party Drift Application Incident Response Update

hackerone.com | blog | #supply-chain | #incident-response | #hackerone | #salesloft | #drift | #salesforce | #data-breach
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne closed its Salesloft Drift investigation: some Salesforce data was accessed in August, but no customer vulnerability data was exposed, no lateral movement found, and remediation is complete.
Published
Collected

Related coverage

blog · bugcrowd.com
Update: Bugcrowd Response to Salesloft Drift Third-Party Security Event
Bugcrowd is among 700+ companies hit by the Salesloft Drift breach via its Salesforce integration; exposed data was limited to business contacts, billing addresses, and old test credentials.
blog · bugcrowd.com
Bugcrowd response to Salesforce-linked third-party Drift application security event
After Salesloft Drift disclosed unauthorized access to its Salesforce-integrated app, Bugcrowd investigated with Salesforce and external specialists, finding evidence some Salesforce data was accessed.
blog · bishopfox.com
State of the SaaS Security Union
AppOmni CTO Brian Soby on two active SaaS threats: UNC6040 ransoms stolen Salesforce data; UNC6395 breached Salesloft Drift and hit 700+ customers, harvesting secrets for Workspace, M365, and AWS.
blog · aikido.dev
LiteLLM compromised again: infostealer and RAT found in version 1.107.0
# LiteLLM compromised again: infostealer and RAT found in version 1.107.0 Written by Ilyas Makari Published on: Oct 21, 2026 On October 21, 2026, version 1.107.0 of LiteLLM (a popular open source...
blog · wiz.io
LiteLLM Compromised, Steals Credentials
# LiteLLM Compromised, Steals Credentials In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a...
blog · wiz.io
Supply Chain Zero Days: Closing the Gap Between Publication and Detection
Attackers use compromised npm packages to spread malware in minutes. Discover how Wiz detects malicious packages at publication using AI and dynamic analysis.
Back