The City-Forum Campaign has been actively siphoning data from Salesforce and ServiceNow portals for 17 months. Researchers at Reco identified the threat actor, who is exploiting guest user access to pull records from…
2 articles · Updated August 12, 2026
Recent Intelligence Reports
A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months— Feeds2.Feedburner · August 12, 2026