A sophisticated supply chain attack saw threat actors compromise Qubole's AWS identity and access management (IAM) credentials, leading to the exfiltration of sensitive data from numerous customer cloud environments.
Three vulnerabilities in Salesforce Agentforce, known as SalesBleed, enabled attackers to hijack AI agents for data theft and phishing attacks.
The 'SalesBleed' attack chain targets Salesforce Agentforce, allowing attackers to use prompt injection to silently exfiltrate sensitive CRM data via zero-click methods.
