Vulnerabilità ed exploit · Configurazione errata
ShinyHunters ha usato una versione modificata di AuraInspector per scansionare siti Experience Cloud. Gli attaccanti hanno estratto dati CRM sfruttando profili guest configurati in modo eccessivamente permissivo. Salesforce conferma che si tratta di misconfigurazioni dei clienti e il gruppo rivendica centinaia di siti compromessi.
6 fonti · 11 mar
Help Net Security
ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites - Help Net Security
Salesforce customers have, once again, been targeted by the ShinyHunters group - or, at least, it's what the group claims.
originaleCyberScoop
Salesforce issues new security alert tied to third customer attack spree in six months
Researchers said the threat group behind the campaign is associated with ShinyHunters, an outfit that’s previously stolen data from Salesforce instances for extortion attempts.
originaleThe Hacker News
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool
Modified AuraInspector scans misconfigured Salesforce Experience Cloud sites, extracting CRM data and enabling targeted vishing campaigns.
originalePart of the PlainSec briefing for 2026-03-12
Every edition of this story: ShinyHunters Sfrutta Experience Cloud Malconfigurato per Rubare Dati CRM