Threat actors had access to Salesloft’s GitHub account between March and June 2025 and performed reconnaissance.

Cloudflare, Palo Alto Networks, and Zscaler said their Salesforce instances were hacked as part of the Salesforce-Salesloft Drift attacks.

How the threat actor, tracked as UNC (uncategorised) 6395, obtained the OAuth tokens from Salesloft to exfiltrate data from customer Salesforce instances wasn't detailed. Saleslof ...

The Salesloft Drift breach affected hundreds of organizations through Salesforce, including Cloudflare, Palo Alto Networks, ...

Google Threat Intelligence Group has tracked threat actor UNC6395 stealing OAuth tokens via Salesloft Drift integrations in a ...

Salesloft says attackers first breached its GitHub account in March, leading to the theft of Drift OAuth tokens later used in ...

Salesforce customers have again been targeted in a “widespread data theft campaign,” this time via compromised OAuth tokens ...

Google Threat Intelligence Group shared its findings about a threat actor responsible for stealing Salesforce customer data ...

Solution natively automates conversion data syncing between AdWords and Salesforce, a task currently handled by several Salesforce app partners.

How agencies are unlocking greater value from their Salesforce data with a software solution designed to streamline cross-agency data integration.