News

Threat actors use custom AuraInspector to harvest data from Salesforce systems

  • Pierluigi Paganini--Securityaffairs.com
  • published date: 2026-03-10 12:29:52 UTC

Attackers are mass-scanning Salesforce Experience Cloud sites using a modified AuraInspector tool to exploit misconfigurations and access sensitive data. Salesforce CSOC warns that threat actors are mass-scanning publicly accessible Experience Cloud sites usi…

Threat actors use custom AuraInspector to harvest data from Salesforce systems Salesforce CSOC warns that threat actors are mass-scanning publicly accessible Experience Cloud sites using a modified … [+2561 chars]