'Overly Permissive' Salesforce Cloud Configs in the Crosshairs

Threat actors are exploiting "customers' overly permissive" Salesforce Experience Cloud guest user configurations to steal sensitive data, Salesforce Security said in a March 7 blog post.

Salesforce said this issue is unrelated to a vulnerability inherent to its platform and that Salesforce remains secure. "Our investigation to date confirms that this activity relates to a customer-configured guest user setting," the blog post read. 

https://www.darkreading.com/application-security/overly-permissive-salesforce-cloud-configs-crosshairs