ShinyHunters Targets Hundreds of Websites in New Salesforce Campaign
ID: 92396c4d-aca1-5a2f-969f-e25fbc5612c5
STIX ID: report--92396c4d-aca1-5a2f-969f-e25fbc5612c5
Feed Name: Infosecurity Magazine (News)
Threat Score
Salesforce warns that ShinyHunters has been mass-scanning Experience Cloud sites using a modified Aura Inspector tool to exploit overly permissive guest user configurations, reportedly compromising contact data from hundreds of sites; the company urged customers to audit guest permissions, disable public API access for guest users, enforce least privilege, and review logs to prevent follow-on social engineering and wider intrusions.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.