OAuth Supply Chain Attacks
OAuth Supply Chain Attacks
Articles on supply chain attacks exploiting OAuth tokens and integrations, including cases affecting Salesforce, service-to-service authorization risks, and mitigation strategies.
oauth supply chain attacksJun 29, 20265 min
Stale Credentials, Stolen Tokens: How the Klue Breach Unlocked Salesforce Data Across Dozens of Companies
After attackers breached competitive-intelligence vendor Klue through a dormant integration credential, they harvested OAuth tokens and used them to exfiltrate CRM data from customers including Huntress, LastPass, Recorded Future, HackerOne, Tanium, and others — prompting the extortion group Icarus to claim responsibility and leak victim data.