Firstpost Salesforce Faces Job Cuts Amid Major Data Breach Concerns
Article Content
- •Salesforce is cutting 4,000 jobs in response to a significant data breach.
- •The breach involved unauthorized API access through exploited OAuth tokens.
- •Critics warn that reducing human oversight post-breach could increase security risks.
Salesforce has announced a restructuring plan that will cut approximately 4,000 jobs due to a significant data breach linked to its third-party ecosystem. The breach, associated with the Drift conversational AI tool, exposed thousands of customer records and raised alarms about supply-chain vulnerabilities. Although Salesforce stated that its core systems were not directly compromised, the attackers exploited OAuth tokens to gain unauthorized API access. This incident has led to increased scrutiny of Salesforce's security infrastructure, particularly its AppExchange marketplace, which presents a sprawling attack surface. The layoffs primarily affect customer support and marketing roles, reflecting a strategic shift towards AI-driven systems. CEO Marc Benioff emphasized the need to reduce headcount as autonomous AI agents take over routine tasks. The timing of the layoffs following the breach has drawn criticism, with concerns that reducing human oversight could lead to further vulnerabilities. The situation highlights the tension between AI adoption and maintaining robust security measures.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Salesforce in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…