AI agent incident
SalesBleed flaws in Salesforce Agentforce allowed zero-click data exfiltration and Slack phishing
What happened
Researchers disclosed three Salesforce Agentforce flaws, together called SalesBleed, that let an attacker hijack trusted AI agents and steal data with no user interaction. Dark Reading described the technique smuggling attacker instructions across apps and into trusted Slack channels for phishing.
Why it matters
Zero-click means the data left without anyone doing anything, and the Slack leg means the agent's output arrived in a trusted channel looking like it came from a colleague. Instructions that cross from one app to another through an agent are untrusted input, however internal the apps.