Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing

retained text

AI
- 
                        
                            Google's TPUs to catch some rays in orbit next weekPart of Project Suncatcher, the proof of concept aims to see how well lightly modified compute fares in orbit
- 
                        
                            Meta's new AI fidget is a ... Tamagotchi?We hope Zuck's Muse Charm doesn't die if you neglect it
- 
                        
                            CVE flood pushes Ubuntu onto weekly kernel release cycleAI-assisted bug hunting is helping pile up vulnerabilities faster than defenders can patch them, so Canonical is picking up the pace
- 
                        
                            Google to critical infra orgs: Our AI scanners won't be evil, promiseGemini 3.8 Flash Cyber and Wiz's Red Agent team up to protect hospitals, public transit, and tech
- 
                        
                            Shut up and calculate: Jev's new AI primitives for codersDevelopers test what they can build with TypeSafe's fast, typed decision model
Infosec
- 
                        
                            Security Russians are posing as Signal support to launch phishing attacksPLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!
- 
                        
                            Security Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attackPLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more
- 
                        
                            Black Hat and DEF CON DEF CON Franklin project enlists hackers to harden critical infrastructureVoting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included
- 
                        
                            Security EQT buys majority share in Swiss cybersecurity biz AcronisWent at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified
- 
                        
                            Malware Month Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sightOn the plus side, infosec's a good bet for a long, stable career
FOSS
- 
                        
                            KDE turns 30 and someone's brought an AI-native desktop proposalAkademy talk imagines Plasma assembling itself around a personal model of each user
- 
                        
                            Shopify extends lifeline to Tailwind as vibe coding erodes web dev platform's bottom lineAcquisition gives open source CSS framework 'a stable long-term home'
- 
                        
                            Switzerland tests a FOSS escape route from Microsoft 365Swiss Army sticks a knife in American cloud apps with its own FOSS push
- 
                        
                            Feel peak Windows was 7? You might like Kumander LinuxDebian and Xfce – solid, sensible choices – with a pretty skin
- 
                        
                            Canonical shuttering some of its legacy chat channelsThe Ubuntu Pastebin went in June, IRC gets demoted next
- 
                        
                            Audacity audio-editing app no longer looks like it's from the early 2000sThe FOSS tool for audio editing has a fresh coat of paint, and new features to boot

document fetched 2026-09-25 02:57 · canonical https://theregister.com/security/2026/09/24/salesforce-agentforce-vulns-allowed-0-click-crm-data-theft-anonymous-phishing/5298958