Salesforce security news · Threat Recapvendors/salesforce.htmlSecurity news, advisories and CVEs for SalesforceMon, 19 Oct 2026 12:28:44 GMT Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Riskhttps://www.infosecurity-magazine.com/news/vulnerabilities-salesforce-ai/16oyl5zFri, 25 Sep 2026 13:30:00 GMTInfosecurity Magazine. The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltrationVulnerabilityAI 'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishinghttps://www.darkreading.com/application-security/salesbleed-exploits-salesforce-agents-slack-phishingp7k0qpThu, 24 Sep 2026 21:04:03 GMTDark Reading. Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.Phishing Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishinghttps://www.theregister.com/security/2026/09/24/salesforce-agentforce-vulns-allowed-0-click-crm-data-theft-anonymous-phishing/52989581l05megThu, 24 Sep 2026 19:01:15 GMTThe Register. 'SalesBleed' security flaws 'lead to very unexpected consequences'VulnerabilityBreachPhishing