Oracle Klue OAuth tokens break into Salesforce accounts
Attackers did not need stolen passwords or phishing pages to access these Salesforce environments. Instead, they allegedly leveraged something many organizations rarely revisit: legacy OAuth tokens...
- Report priority
- Medium
- Targets
- Salesforce
References
- klue.com NeuraCybIntel
- help.salesforce.com · articleView NeuraCybIntel
- cisa.gov · identity-and-access-management NeuraCybIntel
- darkreading.com · scope-salesforce-attacks-expands-icarus-leaks-data DarkReading
- infosecurity-magazine.com · klue-breach-compromise Infosecurity Magazine
- snyk.io · when-a-vendors-breach-becomes-yours-lessons-from-the-klue-incident Snyk
- infosecurity-magazine.com · kddi-breach-japanese-telcos Infosecurity Magazine