ANOTHER SALESFORCE-LINKED DATA BREACH HAS SHINYHUNTERS' FINGERPRINTS ALL OVER IT

Summary from the TLDR InfoSec newsletter

Salesforce reported a new data breach likely involving the ShinyHunters group, who may have accessed customer data through Gainsight apps connected to Salesforce. Upon discovery, Salesforce revoked access tokens and removed the affected apps. Although no vulnerability was found in Salesforce itself, Google analysts linked the incident to prior token-related attacks.