Wire by Fusion42
Fusion42 Scout Raise
The Debrief & Outliers
Regulatory RadarWorkday Debrief · Mon 09:00 UTCSector Deep DiveWorkday Debrief · Tue 09:00 UTCGeo PulseWorkday Debrief · Wed 09:00 UTCOperating ConditionsWorkday Debrief · Thu 09:00 UTCWeekly BriefingWorkday Debrief · Fri 09:00 UTCWTF Happened This WeekSat 09:00 UTC · 3σ outliers
Benchmarks
Benchmarks HomeBy News TypeBy RegionBy Sector
AI WeeklyAbout

Switch product

Fusion42RaiseScoutWire

The Debrief & Outliers

All editionsRegulatory RadarWorkday Debrief · Mon 09:00 UTCSector Deep DiveWorkday Debrief · Tue 09:00 UTCGeo PulseWorkday Debrief · Wed 09:00 UTCOperating ConditionsWorkday Debrief · Thu 09:00 UTCWeekly BriefingWorkday Debrief · Fri 09:00 UTCWTF Happened This WeekSat 09:00 UTC · 3σ outliers

Database & benchmarks

Benchmarks HomeBy News TypeBy RegionBy SectorStories

Account

Sign in
← Back

Wire · market

Long-running Data Theft Campaign Targets Salesforce, ServiceNow

13 August 2026 · By · Wire by Fusion42

Published

13 August 2026

Topic

market

◆ Sectors

CybersecurityEnterprise Software

◆ Source

Read at darkreading.com →

◆ Verified

Fusion42 · 22 August 2026 · Fusion42 review

An advanced threat actor has been using custom tools since early 2025 to exploit overly permissive guest access in Salesforce and ServiceNow instances across multiple global sectors, stealing sensitive data by accessing poorly documented interfaces and endpoints.

This Wire brief sits within Fusion42's coverage of Cybersecurity and Enterprise Software.

◆ ◆ The Wire takeaway

You must urgently audit and restrict guest access in Salesforce and ServiceNow to avoid stealth data breaches using novel attack paths. Your security teams need to hunt the City-Forum indicators now or risk persistent data theft through overlooked platform entry points.

◆ Coverage

1 source · 13 Aug 2026

◆ Related on Wire

◆ Topics

CybersecurityEnterprise Softwaredata-theftsalesforceservicenowcybersecurityguest-accesscustom-tools