Security
Klue OAuth breach exposes Salesforce data in extortion campaign
The Icarus threat group exploited a compromised OAuth integration in Klue’s Battlecards app to steal Salesforce data from multiple organizations, prompting Salesforce to disable the integration while investigations continue. Cybersecurity firms ReliaQuest and Huntress confirmed their data was compromised in the attack.