Vulnerabilities & Exploits · Misconfiguration
ShinyHunters exploits misconfigured Experience Cloud to harvest CRM data Attackers used a modified open-source AuraInspector to find guest-user permission gaps and extract data. ShinyHunters claims responsibility and reports hundreds of affected sites; Salesforce says the cause is customer misconfiguration, not a platform flaw.
6 sources · Mar 11
Timeline Sources Mar 11 Help Net Security
ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites - Help Net Security
Salesforce customers have, once again, been targeted by the ShinyHunters group - or, at least, it's what the group claims.
original Mar 11 CyberScoop
Salesforce issues new security alert tied to third customer attack spree in six months
Researchers said the threat group behind the campaign is associated with ShinyHunters, an outfit that’s previously stolen data from Salesforce instances for extortion attempts.
original Mar 10 The Hacker News
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool
Modified AuraInspector scans misconfigured Salesforce Experience Cloud sites, extracting CRM data and enabling targeted vishing campaigns.
original Part of the PlainSec briefing for 2026-03-12
Every edition of this story: ShinyHunters exploits misconfigured Experience Cloud to harvest CRM data
More from today Vulnerabilities & Exploits · Misconfiguration
ShinyHunters exploits misconfigured Experience Cloud to harvest CRM data Attackers used a modified open-source AuraInspector to find guest-user permission gaps and extract data. ShinyHunters claims responsibility and reports hundreds of affected sites; Salesforce says the cause is customer misconfiguration, not a platform flaw.
6 sources · Mar 11
Timeline Sources Mar 11 Help Net Security
ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites - Help Net Security
Salesforce customers have, once again, been targeted by the ShinyHunters group - or, at least, it's what the group claims.
original Mar 11 CyberScoop
Salesforce issues new security alert tied to third customer attack spree in six months
Researchers said the threat group behind the campaign is associated with ShinyHunters, an outfit that’s previously stolen data from Salesforce instances for extortion attempts.
original Mar 10 The Hacker News
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool
Modified AuraInspector scans misconfigured Salesforce Experience Cloud sites, extracting CRM data and enabling targeted vishing campaigns.
original Part of the PlainSec briefing for 2026-03-12
Every edition of this story: ShinyHunters exploits misconfigured Experience Cloud to harvest CRM data
More from today