Saturday Admin

Data Theft Campaign Targets Salesforce and ServiceNow With 560K+ Attacks

8/15/2026 · 3 min read

salesforceexperience-cloudsecuritydata-theftguest-userscybersecurity

A new data theft campaign, 'City-Forum,' is actively targeting Salesforce Experience Cloud and ServiceNow portals, exploiting misconfigured guest user permissions to steal data, with over 560,000 attacks recorded.

Related Articles