Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking sales
More fun with AI agents and their security holes A now-fixed flaw in Salesforce’s Agentforce could have allowed external attackers to steal sensitive customer data via prompt injection, according to security researchers who published a proof-of-concept attack on Thursday. They were aided by an…
#theregister #IT
https://go.theregister.com/feed/www.theregister.com/2025/09/26/salesforce_agentforce_forceleak_attack/
The Register
npub10c…f4lpy
2025-09-26 12:57:03 UTC
Author Public Key
npub10czyvexf06s7m58632xn8ddk5pe5arkw8vfxsp7qzw3petnx009saf4lpySeen on
wss://relay.momostr.pinkPublished at
2025-09-26 12:57:03 UTCEvent JSON
{
"id": "ff87e75dc9f494e89f1a266105a52564e33da7242a3edeebc852661203d1f99f",
"pubkey": "7e044664c97ea1edd0fa8a8d33b5b6a0734e8ece3b126807c013a21cae667bcb",
"created_at": 1758891423,
"kind": 1,
"tags": [
[
"t",
"it"
],
[
"t",
"theregister"
],
[
"proxy",
"https://geeknews.chat/@theregister/115270708349927395",
"web"
],
[
"proxy",
"https://geeknews.chat/users/theregister/statuses/115270708349927395",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://geeknews.chat/users/theregister/statuses/115270708349927395",
"pink.momostr"
],
[
"-"
]
],
"content": "Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking sales\n\nMore fun with AI agents and their security holes A now-fixed flaw in Salesforce’s Agentforce could have allowed external attackers to steal sensitive customer data via prompt injection, according to security researchers who published a proof-of-concept attack on Thursday. They were aided by an…\n#theregister #IT\nhttps://go.theregister.com/feed/www.theregister.com/2025/09/26/salesforce_agentforce_forceleak_attack/",
"sig": "b5e85c778705730081105d3b70c42b1ee076bc8c5a27843b8560687214bb89617d26913bfb6d5f6511e3d4b4dfc529df4982839625ef24f6df4a3d2b62e87149"
}