Episode Details

Daily Cyber News: Salesforce agents could turn trusted Slack threads into phishing

External input could have induced Salesforce Agentforce bots to post phishing messages inside trusted company Slack threads. Researchers placed malicious instructions in public Web-to-lead forms, which an agent could later process inside a customer environment. The technique could also extract limited amounts of data.

Key context: Salesforce said it found no evidence of malicious exploitation.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, phishing, Salesforce, agents, trusted, Slack, threads.