A NOT SO COMPREHENSIVE GUIDE TO SECURING YOUR SALESFORCE ORGANIZATION

Summary from the TLDR InfoSec newsletter

This article discusses Salesforce security vulnerabilities. Insecure SOQL queries in Apex can bypass sharing models, risking sensitive data exposure without enforcing object-level security. It warns against storing credentials in cleartext in Custom Metadata Types, Settings, Objects, and Apex comments. It also explains managed packages with namespaces, authorization, and Apex Actions via REST API, setting the stage for real-world exploitation scenarios.