Hackers Breached Klue Integration to Steal Salesforce CRM Data via OAuth Tokens

Threat actors exploited a trusted third-party SaaS integration to silently harvest enterprise CRM data, marking the latest chapter in an escalating wave of OAuth-abuse attacks targeting Salesforce ecosystems. Researchers at ReliaQuest observed attackers leveraging a compromised Klue Battlecards integration, a competitive-intelligence platform...

Læs hele artiklen hos kilden.