The City-Forum Campaign has been actively siphoning data from Salesforce and ServiceNow portals for 17 months. Researchers at Reco identified the threat actor, who is exploiting guest user access to pull records from…
2 articles · Updated August 12, 2026
Recent Intelligence Reports
New “City-Forum” Hackers Attacking Salesforce and ServiceNow Instances Worldwide— Cybersecuritynews · August 12, 2026