Salesforce Agentforce Tricked Into Leaking Sales Leads

Salesforce Agentforce tricked into leaking sales leads

: More fun with AI agents and their security holes

Salesforce Agentforce hit by Noma “ForcedLeak” exploit

Researchers at Noma have disclosed a prompt-injection vulnerability, named “ForcedLeak,” affecting Salesforce’s Agentforce autonomous AI agents. The flaw allows attackers to embed malicious prompts in web forms, causing the AI agent to exfiltrate sensitive customer relationship management data. The vulnerability targets Agentforce, an AI platform within the Salesforce ecosystem for creating autonomous agents for business tasks. Security firm Nom…

ForcedLeak: Critical Salesforce AgentForce Vulnerability

A recently disclosed security research report has revealed a severe vulnerability chain in Salesforce AgentForce, dubbed ForcedLeak, which highlights a new class of AI-specific threats in enterprise systems.   The vulnerability, discovered by a cybersecurity firm and rated critical with a CVSS score of 9.4, exposes how the expanded attack surface of autonomous AI agents like those in AgentForce can be exploited through indirect prompt injection …

Salesforce 修复严重 ForcedLeak 漏洞

数字技术正在深刻改变医疗行业格局,推动医疗服务流程优化和效率提升,为患者带来更便捷、精准的就医体验,同时也带来数据安全和隐私保护等新挑战,促使医疗机构加速数字化转型进程.

Salesforce AI Hack Enabled CRM Data Theft

Eduard Kovacs reports: Prompt injection and an expired domain could have been used to target Salesforce’s Agentforce platform for data theft. The attack method, dubbed ForcedLeak, was discovered by researchers at Noma Security, a company that recently raised $100 million for its AI agent security platform. Salesforce Agentforce enables businesses to build and deploy autonomous AI agents… Introduction to Malware Binary Triage (IMBT) Course Looki…

Salesforce AI Agent Vulnerability Allows Let Attackers Exfiltration Sensitive Data

A critical vulnerability chain in Salesforce’s Agentforce AI platform, which could have allowed external attackers to steal sensitive CRM data. The vulnerability, dubbed ForcedLeak by Noma Labs, which discovered it, carries a CVSS score of 9.4 and was executed through a sophisticated indirect prompt injection attack. This discovery highlights the expanded and fundamentally different attack surface presented […] The post Salesforce AI Agent Vulne…