News
One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
3 hours from now
One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
By info@thehackernews.com (The Hacker News)
A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according to research published this week by agent security platform Reco. The activity, which Reco has named the City Forum campaign after a domain tied to the attacker's IP address, traces back to one server: 158.220.87.79, hosted on a
More from The Hacker News
AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files
4 hours from now
TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
4 hours from now
16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
3 hours from now
SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers
1 hour from now
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
1 hour ago