'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing

Researchers disclosed "Salesbleed" vulnerabilities in Salesforce Agentforce that let attackers inject malicious prompts through Web-to-lead forms to exfiltrate data and to co-opt Salesforce agents into sending phishing messages inside trusted Slack channels; Salesforce has updated URL parsing, centralized URL inspection, and tightened default Slack agent actions, and reports no known real-world exploitation while warning that agentic platforms pose ongoing structural visibility and abuse risks.