Salesforce Aura Data Theft

ShinyHunters has once again placed Salesforce customers in their crosshairs – this time abusing guest user misconfigurations in public-facing Experience Cloud sites. The group claims to have compromised 400 organizations by pairing these overly-permissive settings with a modified version of the AuraInspector auditing tool to query Salesforce CRM objects without authentication. Join Matt and David for the latest episode of State of Cybercrime as they break down how this campaign fits squarely into the ShinyHunters playbook. They will also explore emerging AI security risks and examine the shifting momentum in the race to define the dominant LLM platform. Want to join us live? Save a seat here: More from Varonis ⬇️ Visit our website: LinkedIn: X/Twitter: Instagram:

You can listen to Salesforce Aura Data Theft online on Radio and Podcast. Open the player on this page to stream the available audio.

Salesforce Aura Data Theft is an episode from Inside Out Security by Mike Buckbee.

This episode is 00:29:55 long.

This episode was published on Mar 20, 2026.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Inside Out Security when more episodes are available from the podcast feed.