Attackers are actively exploiting misconfigured Salesforce and ServiceNow customer portals to steal data that should be restricted but is exposed to anonymous users through custom attack tools. Organizations using these platforms should immediately audit
Read the full article: https://www.bleepingcomputer.com/news/security/city-forum-data-theft-attacks-target-salesforce-servicenow-portals/