Microsoft Reveals Year-Long Salesforce Data Theft via OAuth Abuse

Attackers linked to ShinyHunters spent a year stealing data from Salesforce environments by abusing OAuth connections, not exploiting platform flaws. Microsoft's investigation found the attackers leveraged trusted third-party integrations to access corporate data. The campaign highlights risks in OAuth trust models, not Salesforce vulnerabilities.