7/16/2026 · 1 min read
salesforcesecuritycyber-attackshinyhuntersmicrosoftthreat-intelligence
Microsoft has identified and mapped three distinct attack paths targeting Salesforce, linking these methods to a year of activity by the notorious ShinyHunters hacking group. This research highlights active exploitation techniques impacting Salesforce environments.
With the Salesforce MFA enforcement deadline rapidly approaching on July 20, 2026, this article serves as a crucial last-minute reminder to ensure your organization is compliant.
Salesforce has unexpectedly canceled the planned retirement of permissions in profiles, originally slated for Spring '26. This backflip, attributed to customer feedback and lingering feature gaps, underscores the ongoing importance of Permission Sets for robust security architecture.
Salesforce has officially halted multi-factor authentication (MFA) enforcement for all employee users until further notice, a significant pause in a major security mandate. The reason for this unexpected delay, which comes after some sandbox enforcement had already begun, remains undisclosed.