Last seen September 24, 2025

AI Security Incident

Evidence indicates that the affected technology is affected by a security issue.

Technical Severity
Low severity
Lifecycle Status

STABLE

Sources

What Happened

Evidence indicates that the affected technology is affected by a security issue.

Why This Matters

Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Exposure

Recommended Response
First Seen

Sep 24, 2025 05:30

Last Seen

Sep 24, 2025 05:30

Exploitation status: UNKNOWN

Primary entities:

Credential Exposure Data Leakage Remote Code Execution Supply Chain

Timeline

  • Incident first seen
    Sep 24, 2025 05:30

    BugSkan first recorded this incident.

  • AI Domino Effect: How One App Breach Toppled Giants - TrendMicro
    Sep 24, 2025 05:30

    trendmicro.com · Data Leak

Sources

AI Domino Effect: How One App Breach Toppled Giants - TrendMicro

trendmicro.com · Sep 24, 2025 05:30

Threat actors (UNC6395) initiated a supply chain attack by compromising a Salesloft GitHub repository to exfiltrate a sensitive OAuth token. This token granted privileged access to Salesloft's Drift account, subsequently allowing the attackers to exfiltrate customer conversation data, contact information, and OpenAI API credentials from over 700 connected Salesforce instances.

Open publisher source

Watchlist Match

Want personalized relevance?

Create an account to see which incidents overlap with the technologies you monitor.

← Back to incident intelligence