Salesforce Sounds Alarm Over Fresh Data Extortion Campaign

CRM-Obsessed ShinyHunters Gang Exploits Misconfigured Customer Experience Portals Mathew J. Schwartz (euroinfosec) • March 10, 2026     Image: Jonathan Weiss/Shutterstock A prolific and noisy cybercrime gang with a penchant for stealing Salesforce customers’ data and holding it ransom is taking advantage of misconfigured guest accounts meant to provide public access to services meant to … Read more

Social Engineering Hackers Target Okta Single Sign On

ShinyHunters Campaign Uses Voice Phishing to Bypass MFA and Steal Corporate Data Mathew J. Schwartz (euroinfosec) • January 28, 2026     Image: Oleksandr Yashchuk/Shutterstock Single sign-on customers of identity provider Okta should be on alert against attackers seeking to gain access to their corporate network, steal data and hold it to ransom, security experts … Read more