Last seen September 24, 2025

AI Security Incident

Evidence indicates that the affected technology is affected by a security issue.

Technical Severity
Low severity
Lifecycle Status

STABLE

Sources

What Happened

Evidence indicates that the affected technology is affected by a security issue.

Why This Matters

Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

Recommended Response
First Seen

Sep 24, 2025 05:30

Last Seen

Sep 24, 2025 05:30

Exploitation status: UNKNOWN

Primary entities:

GitHub Data Leakage Remote Code Execution Supply Chain

Timeline

  • Incident first seen
    Sep 24, 2025 05:30

    BugSkan first recorded this incident.

  • Domino Effect: How One Vendor's AI App Breach Toppled Giants - www.trendmicro.com
    Sep 24, 2025 05:30

    trendmicro.com · Data Leak

Sources

Domino Effect: How One Vendor's AI App Breach Toppled Giants - www.trendmicro.com

trendmicro.com · Sep 24, 2025 05:30

A multi-stage supply chain attack, tracked as UNC6395, originated from the compromise of a Salesloft GitHub repository, leading to the theft of a sensitive OAuth token. This token enabled access to a high-privilege AI chatbot application (Drift) and subsequent exfiltration of customer conversation data and contact information from over 700 integrated Salesforce instances.

Open publisher source

Watchlist Match

Want personalized relevance?

Create an account to see which incidents overlap with the technologies you monitor.

← Back to incident intelligence