Cisco Plans Security-by-Default Changes as Gainsight Breach Exposes Salesforce Data

Summary

Security Now examines Cisco's planned network security changes and a Gainsight breach linked to Salesforce customer data. The hosts also discuss age-verification privacy concerns and passkey management.

Key points

• Salesforce said unusual activity involving Gainsight applications may have enabled unauthorized access to customer data. It revoked associated access and refresh tokens and temporarily removed the applications from AppExchange.
• Google's threat intelligence group reported more than 200 potentially affected Salesforce instances. Scattered Lapsis Hunters claimed responsibility; several named companies disputed or investigated the claims.
• Shiny Hunters claimed it accessed Gainsight through an earlier Salesloft Drift campaign. Gainsight confirmed it was a victim of that earlier campaign.
• Cisco announced plans to strengthen default protections, warn about insecure configurations, phase out legacy features and develop targeted shields for newly identified vulnerabilities.
• The hosts raised privacy and implementation concerns about age verification under Australia's social media minimum-age legislation.
• The discussion notes that cross-platform password managers can synchronize passkeys, while universal cross-platform passkey import and export was not yet available.

People