Enterprise web forms designed to ingest data from unknown parties are now active breach vectors. The disclosure of SalesBleed, a series of vulnerabilities in Salesforce Agentforce, confirms that a single poisoned record can trigger zero-click data exfiltration – no privilege escalation, no user click, no attachment. The entry point is the most basic form on the modern internet: a public Web-to-Lead endpoint, the kind organizations deliberately leave open to collect leads from

Salesforce has quietly patched a set of AI agent flaws that let attackers pull customer data out of live CRM systems without a single click from a victim. Zenity Labs, an AI agent security research firm, disclosed the vulnerabilities on September 24, 2026, under the name “SalesBleed,” according to Infosecurity Magazine. The flaws lived inside Agentforce, the AI agent platform Salesforce has pushed hard into its customer base since 2025, and they worked by hiding malicious ins

Dubbed SalesBleed, the flaws could be exploited via Web-to-Lead forms, Salesforce’s official lead-collection mechanism, which also provides a direct path to the CRM. Malicious instructions injected into a Web-to-Lead lead would remain dormant until an employee asks an Agentforce agent to interact with the submission, causing the agent to process the poisoned lead and execute the hidden instructions. https://www.securityweek.com/salesbleed-flaws-in-salesforce-agentforce-enable

Days before the start of Dreamforce, Salesforce announced the completion of its acquisition of Fin.AI. An update on where Fin’s solutions and customers fit within the company organizationally and strategically was of interest. Six months after the announcement of Agentforce Contact Center (AFCC), also top on my list of things to discuss with Service Cloud leaders was how the new CCaaS solution is being received by Salesforce customers and how the delivery of announced 2026 ro

Agentforce and AIforce are creating a lot of customer interest and Salesforce’s partner ecosystem is poised to play an important role in the successful adoption of these new capabilities. Stephanie Sadowski leads the Global Salesforce Business group for Accenture, which is a Salesforce Global Partner of the Year for FY27, and told analysts at Dreamforce about the huge cross partner opportunity AIforce enables by opening up the interface access to Salesforce. https://diginom

Salesforce CEO Marc Benioff highlighted significant growth in agentic AI usage within its applications during the company's second fiscal quarter earnings call. This surge in usage, particularly through Model Context Protocol and command-line interface calls, has sixfold, countering predictions that AI would diminish the need for CRM and SaaS platforms. Instead, Benioff emphasized how these technologies are becoming essential for businesses to effectively leverage AI, based o