One Malicious OAuth Approval Can Give Hackers Persistent Access to Salesforce Data

One mistaken approval inside Salesforce can hand attackers a quiet, durable route into a company’s most sensitive customer records. Recent campaigns tied to tradecraft associated with ShinyHunters show how a trusted application connection, rather than a software flaw, can be turned into a channel for large-scale data theft and continued...

Read the full article at the source.