Salesforce

A supply chain attack targeting Klue's market intelligence platform allowed threat actors to steal Salesforce customer data through OAuth token abuse. The Icarus extortion group is identified as the primary actor behind this recent wave of CRM-focused breaches.

The AI coding market is moving away from predictable monthly fees toward variable, token-based pricing models. Consequently, companies like Cursor are launching new enterprise features to provide the visibility and control required by finance and IT teams.

Threat actors compromised DigiCert support endpoints by sending malicious attachments through a customer chat channel. This breach enabled the unauthorized retrieval of certificate initialization codes, resulting in the misissuance of 60 code signing certificates.