TLDR Tech / IT
Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity
Microsoft reports that threat activity aligned with ShinyHunters occurred for about a year against Salesforce environments without exploiting Salesforce platform vulnerabilities. The intrusions used three pathways, so attackers blended into normal authentication while abusing post-login API access.
Read the full story