Google Threat Intelligence Group has tracked threat actor UNC6395 stealing OAuth tokens via Salesloft Drift integrations in a ...

Cloudflare, Palo Alto Networks, and Zscaler said their Salesforce instances were hacked as part of the Salesforce-Salesloft Drift attacks.

Threat actors had access to Salesloft’s GitHub account between March and June 2025 and performed reconnaissance.

Breach of Salesloft Drift integration exposes data at Cloudflare, Zscaler and Palo Alto Networks - SiliconANGLE ...

Salesloft says attackers first breached its GitHub account in March, leading to the theft of Drift OAuth tokens later used in ...

In this episode, we discuss a recent significant cyber attack where Palo Alto Networks experienced a data breach through their Salesforce environment due to a compromised SalesLoft drift integration.

Google Threat Intelligence Group shared its findings about a threat actor responsible for stealing Salesforce customer data ...

Cybersecurity company Zscaler warns it suffered a data breach after threat actors gained access to its Salesforce instance ...

Google expands Salesloft Drift breach scope beyond Salesforce; Salesloft says core platform safe, isolated to Drift app.

Three more well-known cybersecurity vendors have joined the list of companies impacted in the recent breach of a third-party ...

The breach, now known to have begun in March, raises questions about why it took six months for Salesloft to detect the ...