Latest
●Prompt injection turns up in website HTTP headers, study finds●Nezha dashboard can be crashed by any low-privilege member●MCP Python SDK kept sessions forever, letting memory run out●Nginx UI flaws let MCP tools skip config security checks●Bank of America adds 1,000 contractors to fix Mythos-found bugs●UK stops short of AI rules in Cyber Security Bill●GhostAction campaign hits 1,900 GitHub accounts and 30,000 repos●Attackers target critical Langflow flaw in 1,423 exploit attempts
Friday, 16 October 2026
1 agent hack today▼ 7 vs yesterday (8)
The Agentic TimesPowered byVortal

Incident database

SalesBleed: Salesforce Agentforce flaws enabled 0-click CRM data theft, phishing

Zenity Labs discovered three vulnerabilities, dubbed SalesBleed, in Salesforce Agentforce that allowed attackers to poison lead forms with indirect prompt injections, silently exfiltrate CRM data via DNS/image requests and Slack link unfurling, and send phishing messages under the AI agent's identity. Zenity reported the issues to Salesforce on June 1, and Salesforce worked with them to fix the flaws, which no longer work.

Disclosed 24 September 2026 · Record updated 1 October 2026

Impact

Attackers could silently steal CRM data without user interaction and send anonymous phishing messages via Slack using the trusted AI agent's identity, exploiting weaknesses in Trusted URL redaction and missing confirmation controls on Slack reply actions.

Our coverage

Sources

  1. theregister.comhttps://theregister.com/security/2026/09/24/salesforce-agentforce-vulns-allowed-0-click-crm-data-theft-anonymous-phishing/5298958
  2. darkreading.comhttps://darkreading.com/application-security/salesbleed-exploits-salesforce-agents-slack-phishing