We found a way to pull sensitive account data out of Salesforce Agentforce without ever logging in, or requiring the victim to click anything. The entry point was a public Web-to-Lead form, the exit was a DNS query. We call it SalesBleed. ...
SalesBleed: Indirect Prompt Injection and 0-Click Data Exfiltration on Agentforce
About this summary. This is a short excerpt from the description that AI Incident Database published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://labs.zenity.io/post/salesbleed-0-click-data-exfiltration-on-agentforce
Source attribution: headline and facts are from AI Incident Database (labs.zenity.io). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Upwind secures $400 million to protect AI across endpoints, code, and cloud
Upwind Security has raised $400 million in Series C funding to expand its cloud and AI security platform, bringing the company’s total funding to more than $800 million…
What Happens Next: Turn Cloud Security Assessment Findings Into Action
What Happens Next: Turn Cloud Security Assessment Findings Into Action October 28, 2026 Adrian Pascual BLOG 5 min. Cloud security assessments are good at finding…
Log-To-Leak: Prompt Injection Attacks on Tool-Using LLM Agents via the Model Context Protocol
arXiv:2610.36108v1 Announce Type: new Abstract: LLM agents increasingly access external tools through the Model Context Protocol (MCP), but the natural-language metadata…
LLM agent security needs more than guardrails
Madhu Shashanka, Chief Scientist at Concentric AI, explains why securing LLM tools and agents depends more on your data than on the model. Controls on model behavior…
In-the-Wild Attack Abuses AI Agents' Trust in Markdown
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
Agentic AI Defense: Decode-Time Provenance Binding for MCP
arXiv:2610.31974v1 Announce Type: new Abstract: Agentic AI systems using the Model Context Protocol (MCP) are vulnerable to indirect prompt injection through untrusted…