HUNDREDS OF SALESFORCE CUSTOMERS ALLEGEDLY TARGETED IN NEW DATA THEFT CAMPAIGN

Summary from the TLDR InfoSec newsletter

ShinyHunters is abusing misconfigured Salesforce Experience Cloud guest-user settings and a customized Aura Inspector tool to mass‑exfiltrate data from hundreds of organizations' CRM instances, then extort victims by threatening to leak it. Salesforce stresses its platform is not vulnerable, shifting responsibility to customers' configuration hygiene and third‑party integrations, making rigorous access reviews and hardening of guest accounts urgent.