No Result
View All Result
SUBMIT YOUR ARTICLES
  • Login
Saturday, October 4, 2025
TheAdviserMagazine.com
  • Home
  • Financial Planning
    • Financial Planning
    • Personal Finance
  • Market Research
    • Business
    • Investing
    • Money
    • Economy
    • Markets
    • Stocks
    • Trading
  • 401k Plans
  • College
  • IRS & Taxes
  • Estate Plans
  • Social Security
  • Medicare
  • Legal
  • Home
  • Financial Planning
    • Financial Planning
    • Personal Finance
  • Market Research
    • Business
    • Investing
    • Money
    • Economy
    • Markets
    • Stocks
    • Trading
  • 401k Plans
  • College
  • IRS & Taxes
  • Estate Plans
  • Social Security
  • Medicare
  • Legal
No Result
View All Result
TheAdviserMagazine.com
No Result
View All Result
Home Market Research Market Analysis

The Abyss Of The Salesloft-Salesforce Breach May Reach The Challenger Deep

by TheAdviserMagazine
3 weeks ago
in Market Analysis
Reading Time: 3 mins read
A A
The Abyss Of The Salesloft-Salesforce Breach May Reach The Challenger Deep
Share on FacebookShare on TwitterShare on LInkedIn


News has been trickling out since August 20 about a security issue in Salesloft’s Drift product, a marketing and sales chatbot that integrates with CRM systems to capture and track sales opportunities. The issue started in March, when threat actors accessed Salesloft’s GitHub account and did reconnaissance, which helped them access Drift’s AWS environment and obtain OAuth tokens. From there, they accessed Drift customers’ Salesforce instances from August 8–18.

Salesforce has suffered repeated attacks this year where advanced persistent threats (APTs) compromised customer databases by targeting individual companies. This attack is much broader in terms of both scope and number of companies affected, as Drift is a popular tool used by over 700 companies. Its customers include several notable cybersecurity vendors such as Black Duck, Cloudflare, Okta, OneTrust, Palo Alto Networks, Proofpoint, and Zscaler.

What Data Was Compromised?

By design, Drift is meant to improve sales engagement with prospects and customers. Its integration with CRM systems lets Drift track leads, update CRM records, and trigger follow-up actions. Because of the Salesforce integration, the threat actors were able to access:

Sensitive information about client environments such as IP addresses, account information, and access tokens. These are stored in clear text within support case notes to make supporting that customer easier when a case is passed to multiple analysts, but for a hacker, this gives them critical access details to the client’s infrastructure.
Standard information about accounts such as client contact data, sales pipeline, support history, and business strategy. This information seems generic, but for social engineering campaigns, these are the details that threat actors need to make their engagement more believable.

Actions To Take Now To Reduce The Threat To Your Business

While Salesloft has reset the authentication tokens and temporarily disabled Drift, impacted businesses need to take further steps to protect themselves and their employees. After working with their third-party risk management program to define the scope of the breach, companies should take the following actions:

Revoke and rotate all API keys, credentials, and authentication tokens associated with the integration. Additionally, if your investigation of your Salesforce data uncovers any hardcoded secrets or exposed API keys/credentials, they must be rotated immediately. Establish a regular rotation schedule for all API keys and other secrets used in third-party integrations to reduce the window of exposure.
Tune tech and train teams for the social engineering onslaught. Various human-element breach types and tactics will spring up in the coming weeks and months based on the data that was extracted, requiring specific tech and process controls. Your email, messaging, and collaboration security solution and your employees should be tuned to spot the traditional signs of social engineering: authority, novelty, and urgency. Employees should be encouraged — and publicly praised — to pause in the face of these signs and seek additional verification before providing information or completing transactions.
Institute least privileged access controls on your data used by third parties. The guidance we’ve provided on SaaS security applies equally to app developers and customers to limit access to data to only what is needed for that function to execute. In this campaign, companies that restricted inbound access from approved IP addresses did not have their Salesforce data extracted, even though they were targeted. Utilize SaaS security posture management solutions to uncover the risks in your SaaS deployments and improve threat monitoring of your configurations within these apps to limit your exposure based on identified risks.
Secure your software supply chain. Start with an inventory of all software used in the development and delivery process; this includes open-source software tools and components. Ensure that dev environments, pipelines, and source-code management systems utilize Zero Trust principles, have phishing-resistant multifactor authentication enforced, enable branch protection, monitor for security misconfigurations, automate application security testing, and utilize a secrets management solution to avoid any credentials, tokens, or environment variables being passed in plaintext.
Define your incident escalation matrix. Delineate severity levels and assess materiality in the context of the regulatory requirements to which your organization is beholden. Socialize this matrix with all internal and external stakeholders, and work with outside counsel and your incident response service provider to develop executive and board tabletop exercises involving complex, cascading nth-party breach and breach notification scenarios.

Stay Tuned

Details continue to emerge from Salesloft as well as businesses directly impacted by the breach. Because we still don’t know how many companies were victims of data theft or the exact attack details, the total impact remains unclear. The security and risk team at Forrester will provide updates to help clients as new details come to light.



Source link

Tags: AbyssBreachchallengerDeepreachSalesloftSalesforce
ShareTweetShare
Previous Post

Microsoft: Startet jetzt der Angriff auf das Rekordhoch?

Next Post

Important takeaways from Adobe’s (ADBE) Q3 2025 earnings report

Related Posts

edit post
You Still Need A Design System — Now More Than Ever

You Still Need A Design System — Now More Than Ever

by TheAdviserMagazine
October 3, 2025
0

Design is in the news a lot these days. The US government recently created an initiative mandating better design for...

edit post
Why Accurate Surgical Procedure Data Is a Strategic Advantage Today?

Why Accurate Surgical Procedure Data Is a Strategic Advantage Today?

by TheAdviserMagazine
October 3, 2025
0

The global healthcare ecosystem is evolving rapidly, with surgical volumes serving as a crucial indicator of infrastructure readiness, patient demand,...

edit post
Bitcoin Rally Gains Steam as Key Resistance Zone Near 5,500 Comes Into View

Bitcoin Rally Gains Steam as Key Resistance Zone Near $125,500 Comes Into View

by TheAdviserMagazine
October 3, 2025
0

Bitcoin broke above $120,000 this week, gaining 7% and ending its bearish trading phase. Heavy inflows into spot ETFs and...

edit post
Hydrogen Fueling Station Market Growth Outlook & Investment Opportunities

Hydrogen Fueling Station Market Growth Outlook & Investment Opportunities

by TheAdviserMagazine
October 3, 2025
0

The global hydrogen fueling station market is witnessing rapid growth as the shift toward clean energy accelerates. Fuel cell electric...

edit post
Agentic Commerce Automates Retail’s Next Frontier

Agentic Commerce Automates Retail’s Next Frontier

by TheAdviserMagazine
October 2, 2025
0

Agentic commerce is spreading. OpenAI just launched Instant Checkout, akin to Perplexity’s Buy With Pro, offering shoppers conversational shopping from...

edit post
6 Healthcare Stocks Positioned to Soar After Trump-Pfizer Deal

6 Healthcare Stocks Positioned to Soar After Trump-Pfizer Deal

by TheAdviserMagazine
October 2, 2025
0

Pharmaceutical stocks rose sharply on Thursday, boosted by a nearly 7% rally from Pfizer, which reached a key agreement with...

Next Post
edit post
Important takeaways from Adobe’s (ADBE) Q3 2025 earnings report

Important takeaways from Adobe’s (ADBE) Q3 2025 earnings report

edit post
44% of People With This Debilitating Disease Don’t Know They Have It

44% of People With This Debilitating Disease Don’t Know They Have It

  • Trending
  • Comments
  • Latest
edit post
What Happens If a Spouse Dies Without a Will in North Carolina?

What Happens If a Spouse Dies Without a Will in North Carolina?

September 14, 2025
edit post
California May Reimplement Mask Mandates

California May Reimplement Mask Mandates

September 5, 2025
edit post
Does a Will Need to Be Notarized in North Carolina?

Does a Will Need to Be Notarized in North Carolina?

September 8, 2025
edit post
DACA recipients no longer eligible for Marketplace health insurance and subsidies

DACA recipients no longer eligible for Marketplace health insurance and subsidies

September 11, 2025
edit post
‘Quiet luxury’ is coming for the housing market, The Corcoran Group CEO says. It’s not just the Hamptons, Aspen, and Miami anymore

‘Quiet luxury’ is coming for the housing market, The Corcoran Group CEO says. It’s not just the Hamptons, Aspen, and Miami anymore

September 9, 2025
edit post
Tips to Apply for Mental Health SSDI Without Therapy

Tips to Apply for Mental Health SSDI Without Therapy

September 19, 2025
edit post
Activist Irenic builds a stake in Workiva, hoping to gain two board seats

Activist Irenic builds a stake in Workiva, hoping to gain two board seats

0
edit post
Henry Moon Pie: Time to Support a Reader-Supporting Site

Henry Moon Pie: Time to Support a Reader-Supporting Site

0
edit post
World Liberty Financial sells tokens to Hut8 for treasury reserves at alt=

World Liberty Financial sells tokens to Hut8 for treasury reserves at $0.25 each

0
edit post
Indonesia school collapse death toll rises to 17, dozens still missing

Indonesia school collapse death toll rises to 17, dozens still missing

0
edit post
The Secret Upside of No Kids or Grandkids Nearby

The Secret Upside of No Kids or Grandkids Nearby

0
edit post
The U.S. is about to hold the government’s biggest coal sales in over a decade even as demand wanes

The U.S. is about to hold the government’s biggest coal sales in over a decade even as demand wanes

0
edit post
Henry Moon Pie: Time to Support a Reader-Supporting Site

Henry Moon Pie: Time to Support a Reader-Supporting Site

October 4, 2025
edit post
The U.S. is about to hold the government’s biggest coal sales in over a decade even as demand wanes

The U.S. is about to hold the government’s biggest coal sales in over a decade even as demand wanes

October 4, 2025
edit post
Dow Jones Futures: Rally At Highs With Nvidia A Buy, Palantir A Sell; Big Tesla News Due

Dow Jones Futures: Rally At Highs With Nvidia A Buy, Palantir A Sell; Big Tesla News Due

October 4, 2025
edit post
Indonesia school collapse death toll rises to 17, dozens still missing

Indonesia school collapse death toll rises to 17, dozens still missing

October 4, 2025
edit post
What One Big Move Can Do to Lower Your Monthly Cost of Living

What One Big Move Can Do to Lower Your Monthly Cost of Living

October 4, 2025
edit post
Activist Irenic builds a stake in Workiva, hoping to gain two board seats

Activist Irenic builds a stake in Workiva, hoping to gain two board seats

October 4, 2025
The Adviser Magazine

The first and only national digital and print magazine that connects individuals, families, and businesses to Fee-Only financial advisers, accountants, attorneys and college guidance counselors.

CATEGORIES

  • 401k Plans
  • Business
  • College
  • Cryptocurrency
  • Economy
  • Estate Plans
  • Financial Planning
  • Investing
  • IRS & Taxes
  • Legal
  • Market Analysis
  • Markets
  • Medicare
  • Money
  • Personal Finance
  • Social Security
  • Startups
  • Stock Market
  • Trading

LATEST UPDATES

  • Henry Moon Pie: Time to Support a Reader-Supporting Site
  • The U.S. is about to hold the government’s biggest coal sales in over a decade even as demand wanes
  • Dow Jones Futures: Rally At Highs With Nvidia A Buy, Palantir A Sell; Big Tesla News Due
  • Our Great Privacy Policy
  • Terms of Use, Legal Notices & Disclosures
  • Contact us
  • About Us

© Copyright 2024 All Rights Reserved
See articles for original source and related links to external sites.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In
No Result
View All Result
  • Home
  • Financial Planning
    • Financial Planning
    • Personal Finance
  • Market Research
    • Business
    • Investing
    • Money
    • Economy
    • Markets
    • Stocks
    • Trading
  • 401k Plans
  • College
  • IRS & Taxes
  • Estate Plans
  • Social Security
  • Medicare
  • Legal

© Copyright 2024 All Rights Reserved
See articles for original source and related links to external sites.