PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Update: Bugcrowd Response to Salesloft Drift Third-Party Security Event

bugcrowd.com | blog | #incident-response | #bugcrowd | #salesloft | #drift | #salesforce | #third-party-breach
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bugcrowd is among 700+ companies hit by the Salesloft Drift breach via its Salesforce integration; exposed data was limited to business contacts, billing addresses, and old test credentials.
Published
Collected

Related coverage

blog · bugcrowd.com
Bugcrowd response to Salesforce-linked third-party Drift application security event
After Salesloft Drift disclosed unauthorized access to its Salesforce-integrated app, Bugcrowd investigated with Salesforce and external specialists, finding evidence some Salesforce data was accessed.
blog · hackerone.com
Salesforce-Connected Third-Party Drift Application Incident Response Update
HackerOne closed its Salesloft Drift investigation: some Salesforce data was accessed in August, but no customer vulnerability data was exposed, no lateral movement found, and remediation is complete.
blog · bishopfox.com
State of the SaaS Security Union
AppOmni CTO Brian Soby on two active SaaS threats: UNC6040 ransoms stolen Salesforce data; UNC6395 breached Salesloft Drift and hit 700+ customers, harvesting secrets for Workspace, M365, and AWS.
blog · bugcrowd.com
Behind the scenes of PHP2Shell: What the last 72 hours taught us
PHP2Shell hit fast. Bugcrowd’s CISO shares what 72 hours of response taught us, plus three lessons for CISOs facing the next critical vulnerability.
blog · bugcrowd.com
CISA’s VDP platform: Five years of collaborative defense
CISA’s VDP Platform marks five years with nearly 45,000 submissions and 5,300+ vulnerabilities fixed across 60+ federal agencies. See the key findings.
blog · bugcrowd.com
Weird ways to hide shellcode
Discover a novel red teaming technique for hiding shellcode inside procedurally generated mazes, using shortest-path algorithms to disguise payloads from EDR and antivirus detection.
Back