Salesforce

A campanha Salesloft Drift contra ambientes de clientes Salesforce foi uma demonstração clara de um problema moderno de responsabilidade em SaaS: o atacante não precisou arrombar a porta da frente de cada cliente. O atacante pôde usar tokens de acesso e atualização OAuth de uma integração confiável como autoridade delegada.

Salesforce, a gigante de software, observou que o mercado de IA no Reino Unido deve ultrapassar 1 trilhão de dólares até 2035.

Salesforce said an emergency fix triggered a software issue and a DNS network incident in May 2021. The deeper accountability question is how a globally distributed change, process-restart behavior, recovery dependencies and service-level evidence combined to turn one intervention into a broad continuity failure.

Salesforce's 2019 Pardot permissions incident exposed a hard distinction between restoring a cloud service and restoring confidence in who may do what inside it. The public record supports a careful conclusion: authorization state is operational infrastructure, and continuity is unfinished until that state can be reconstructed, checked, and explained.

The Salesloft Drift campaign against Salesforce customer environments was a clean demonstration of a modern SaaS accountability problem: the attacker did not need to break the front door of every customer. The attacker could use a trusted integration's OAuth access and refresh tokens as delegated authority. That made consent, scopes, token storage, app marketplace governance, customer log visibility, and third-party incident response part of Salesforce accountability even though the public record says the issue did not stem from a vulnerability in Salesforce's core platform.