Author: HackWatchit

Myriad crosses $10M in trading volume as prediction markets gain traction in DeFi. Can speculation on outcomes become a new asset class?Read All

A SaaS Security nightmare for IT managers everywhere recently came true. Attackers leveraged legitimate OAuth tokens from Salesloft’s Drift chatbot integration with Salesforce to silently exfiltrate customer data from the popular CRM platform, according to Google Threat Intelligence Group. The sophisticated attack exposes a critical blind spot that most security teams don’t even know they have. When SaaS Integrations Become Attack Vectors Between August 8-18, 2025, the threat actor Google calls UNC6395 targeted the OAuth-based connection between Drift and Salesforce—an integration that thousands of sales teams rely on daily to sync marketing conversations and lead data. The attacker understood a…

Remote and hybrid work are now permanent, reshaping how workforce agencies operate. This shift hits hard — training jobseekers, guiding employers, and redesigning services are tougher than ever. Workers demand flexibility, favoring remote options, while employers grapple with performance and compliance. Your agency can bridge this gap. It’s especially important because the “new reality” of remote work isn’t limited to tech jobs in large cities. The transformation of employment models is a challenge but also a huge opportunity for demographics with historically limited access to all jobs: caregivers, people with disabilities, and rural workers. For them, virtual job options mean…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) published nine ICS (industrial control systems) advisories, addressing cybersecurity vulnerabilities and risks for asset owners and operators across the critical infrastructure sector.. The advisories cover urgent vulnerabilities in hardware and software, including CPU modules from Mitsubishi Electric, remote terminal units from Schneider Electric, CNC tools and communication managers from Delta Electronics, SCADA (supervisory control and data acquisition) platforms from GE Vernova, various Mitsubishi FA tools, and protection relay systems from Hitachi Energy.  The cybersecurity agency called upon users and administrators to review newly released ICS advisories for technical details and mitigations. CISA…

Palo Alto Networks disclose a data breach linked to Salesloft Drift incident Pierluigi Paganini September 02, 2025 Palo Alto Networks hit by Drift-linked supply-chain attack, exposing Salesforce customer data and support cases via stolen OAuth tokens. Palo Alto Networks is another victim of the Salesloft Drift incident, which allowed attackers to access its Salesforce account, as per BleepingComputer. The company discloses a breach after attackers used stolen OAuth tokens from Salesloft Drift, the exposed information includes customer data and support cases. The company is among hundreds hit in the supply-chain attack, with leaked info potentially including IT details and passwords…

In this Help Net Security video, Dwayne McDaniel, Senior Developer Advocate at GitGuardian, presents findings from The State of Secrets Sprawl 2025. McDaniel explains why generic secrets are especially difficult to detect, why private repositories pose an even greater risk, and how collaboration tools and Docker images have become overlooked sources of exposure. He also discusses the impact of AI coding assistants on security practices and the dangers of long-lived secrets and excessive permissions. The video concludes with practical steps organizations can take, from rotating secrets quickly and integrating scans into CI/CD pipelines to centralizing secret managers and adopting ephemeral…

Executive Summary Unit 42 has observed activity consistent with a specific threat actor campaign leveraging the Salesloft Drift integration to compromise customer Salesforce instances. This brief provides information about our observations and guidance for potentially affected organizations. As detailed in a recent notification from Salesloft, from August 8-18, 2025, a threat actor utilized compromised OAuth credentials to exfiltrate data from affected customers’ Salesforce environments. Our observations indicate that the threat actor performed mass exfiltration of sensitive data from various Salesforce objects, including Account, Contact, Case and Opportunity records. Following exfiltration, the actor appeared to be actively scanning the acquired data…

Last week, Salesloft announced its Drift application was breached, which provided unauthorized access to its customer’s Salesforce data. This supply chain attack impacted hundreds of organizations, including Palo Alto Networks. As soon as we learned of the event, we disconnected the vendor from our Salesforce environment and our Unit 42 security teams launched a comprehensive investigation. Our investigation confirms the incident was isolated to our CRM platform; no Palo Alto Networks products or services were impacted, and they remain secure and fully operational. The data involved includes mostly business contact information, internal sales account and basic case data related to…

Identity has become a core pillar of cybersecurity strategy. Remote work, cloud-first adoption, and distributed supply chains have moved identity from “a tactical IT consideration to a strategic pillar of cybersecurity,” according to Cisco Duo’s 2025 State of Identity Security report. The study is based on a survey of 650 IT and security leaders across North America and Europe. It points to rising AI-driven threats, weak adoption of phishing-resistant authentication, and growing financial risk as key factors shaping identity security priorities in 2025. Confidence crisis in identity providers One of the central findings is a lack of trust in identity…