AI Security Incident
Evidence indicates that the affected technology is affected by a security issue.
What Happened
Evidence indicates that the affected technology is affected by a security issue.
Why This Matters
Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.
Recommended Action
No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.
Exposure
Sep 01, 2025 05:30
Sep 01, 2025 05:30
Exploitation status: UNKNOWN
Primary entities:
Timeline
-
Incident first seen
Sep 01, 2025 05:30BugSkan first recorded this incident.
-
The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft - Krebs on Security
Sep 01, 2025 05:30krebsonsecurity.com · Data Leak
Sources
krebsonsecurity.com · Sep 01, 2025 05:30
The incident involved the mass-theft of authentication tokens from Salesloft's Drift application, leading to significant data exfiltration from integrated corporate Salesforce instances and other cloud services. Threat actors, tracked as UNC6395, leveraged these stolen credentials to perform "authorization sprawl," accessing and siphoning sensitive data including AWS keys and VPN credentials.
Open publisher sourceWatchlist Match
Create an account to see which incidents overlap with the technologies you monitor.