Salesforce Security Alert: API Error Exposed Marketing Data

guest · Aug 3, 2018

Salesforce Security Alert: API Error Exposed Marketing Data
Marketing Cloud Data Potentially Accessed or Corrupted Over 6-Week Period
August 03, 2018
https://www.inforisktoday.com/salesforce-security-alert-api-error-exposed-marketing-data-a-11278

Cloud-based customer relationship management software giant Salesforce.com is warning some users of its Marketing Cloud that any data they stored may have been accessed by third parties or inadvertently corrupted because of an API error that ran from June 4 to July 18.

"During a Marketing Cloud release between June 4, 2018, and July 7, a code change was introduced that, in rare cases, could have caused REST API calls to retrieve or write data from one customer's account to another inadvertently," according to the alert, a copy of which was obtained by Information Security Media Group.

Salesforce has since posted a knowledge article with a brief overview of the problem.

Incident response expert [...] says he's surprised that Salesforce cannot tell customers if their data was accessed by others or altered.
Click to expand...

Rasheed187 · Aug 4, 2018

What a joke, I don't see why companies put so much faith in the cloud.

guest · Aug 8, 2018

Expect API Breaches to Accelerate
August 08, 2018
https://www.darkreading.com/application-security/expect-api-breaches-to-accelerate/d/d-id/1332504

APIs provide the digital glue that binds apps, cloud resources, app services and data all together - and they're increasingly an appsec security threat.

This week the latest API security incident to make waves struck Salesforce, which reported to customers that a bug in an API in its Marketing Cloud service potentially exposed customer data. The flaw could have caused API calls to retrieve or write data from one customer's account to another's, the company stated.

This is a different verse of the same song we continue to hear about the growing trend of API insecurity. Just last month, for example, researchers announced that mobile payment app Venmo has been exposing details about hundreds of millions of transactions through a poorly secured API.

But as businesses jump on the API development trend, they'll need to keep in mind that the more APIs grow in importance to them, the more they will grow in importance t attackers
Click to expand...

Log in or Sign up

Salesforce Security Alert: API Error Exposed Marketing Data

guest Guest

Rasheed187 Registered Member

guest Guest

Log in or Sign up

Salesforce Security Alert: API Error Exposed Marketing Data

guest Guest

Rasheed187 Registered Member

guest Guest

Useful Searches