The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltration
Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
About this summary. This is a short, independently written summary of an article first published by Infosecurity Magazine. Cyber Security News did not report or verify the underlying story. Read the original: https://www.infosecurity-magazine.com/news/vulnerabilities-salesforce-ai/
Source attribution: headline and facts are from Infosecurity Magazine (infosecurity-magazine.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Secure AI Adoption: Close the Governance Gap to Accelerate AI in the Cloud
Secure AI Adoption: Close the Governance Gap to Accelerate AI in the Cloud September 25, 2026 Keegan Justis BLOG 8 min. Every week, another team spins up a new…
Decision Hijacking: Prompt Injection Attacks on Jev's Typed Probabilistic Decisions
arXiv:2609.28613v1 Announce Type: new Abstract: Most studies of prompt injection focus on generative agents, leaving their effects on models with schema-defined outputs…
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
Security flaws in Salesforce Agentforce allowed poisoned leads to hijack its AI agents, silently steal CRM data without requiring a click, and send phishing messages…
Email Prompt Injection: The New Phishing Risk Hiding in Enterprise Inboxes
A seemingly harmless email can contain instructions meant for the AI assistant that handles, summarizes, or acts on your email. This is important as organizations start…
Ajar: Measuring Open Privilege in Agent Defenses
arXiv:2609.26900v1 Announce Type: new Abstract: A language model agent acts through the tools it is given. The data it reads while working on a task can redirect what it…
Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor
Mac security researcher Patrick Wardle says it’s trivial to turn Muse into “the ultimate backdoor.” Increasingly, AI assistants are changing from tools that simply…