PALO ALTO NETWORKS DATA BREACH EXPOSES CUSTOMER INFO, SUPPORT CASES

Summary from the TLDR InfoSec newsletter

Palo Alto Networks suffered a data breach due to compromised OAuth tokens from the Salesloft Drift breach. The attacker primarily extracted business content and related account information, internal sales account records, and basic case data from their Salesforce environment. They were searching for secrets, including AWS access keys, Snowflake tokens, VPN and SSO login strings, and generic keywords.