SecurityWeek

‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration

PhishingHighphishing

Three vulnerabilities in Salesforce Agentforce allowed attackers to hijack trusted agents and steal data. The flaws enabled zero-click phishing attacks, impacting organizations using Salesforce's AI agent platform for customer interactions.

AI summary · generated with Claude

https://www.securityweek.com/salesbleed-flaws-in-salesforce-agentforce-enabled-zero-click-data-exfiltration/