Topic: guest user permissions

Sort by: Relevance | Date
  • ShinyHunters Hackers Launch Massive Salesforce Attack
    March 11, 2026
    88%

    ShinyHunters Hackers Launch Massive Salesforce Attack

    Salesforce is urging customers to immediately review security settings due to a widespread data theft campaign by the ShinyHunters group, which exploits misconfigured guest user permissions on public-facing sites. The attackers use a customized tool to scan for and extract exposed data, which is ...

    Read More »
  • ShinyHunters Targets Salesforce Experience Cloud in New Attack
    March 13, 2026
    85%

    ShinyHunters Targets Salesforce Experience Cloud in New Attack

    The ShinyHunters group is attacking Salesforce Experience Cloud by weaponizing a legitimate security tool, Aura Inspector, to exploit misconfigured guest user permissions and access sensitive data without authentication. Salesforce states its platform is secure but urges customers to immediately ...

    Read More »

Related Topics

social engineering (278) least privilege (29) shinyhunters group (24) incident response (458) data theft (131) indicators of compromise (73) threat actor (45) third-party integrations (30)