The 'SalesBleed' attack chain targets Salesforce Agentforce, allowing attackers to use prompt injection to silently exfiltrate sensitive CRM data via zero-click methods.
Researchers have identified a new attack vector called "workflow identity hijacking" that allows threat actors to exploit authorisation flaws in enterprise AI pipelines.
