Workflow
Salesforce platform
icon
Search documents
Salesforce Cuts Off Gainsight App Access After Detecting Data Exposure Risk—Mandiant Launches Investigation - Salesforce (NYSE:CRM)
Benzinga· 2025-11-21 08:07
Core Insights - Salesforce has halted access to several Gainsight-published applications due to suspicious activity that may have allowed unauthorized access to customer data, prompting an investigation by cybersecurity firm Mandiant [1][2] - The unusual behavior was linked to external connections of the Gainsight applications rather than any flaws within Salesforce's systems [2][3] - Salesforce revoked all active access and refresh tokens associated with Gainsight applications and temporarily removed them from the AppExchange during the investigation [3] Company Actions - Salesforce stated that its review shows no evidence of vulnerabilities within its platform, emphasizing that the issue originated from the external connections of the applications [3][4] - Gainsight is collaborating with Salesforce and has engaged Mandiant to conduct a comprehensive forensic investigation into the matter [4] Industry Context - This incident highlights a growing trend of risks associated with third-party applications connected to major enterprise platforms, as noted by cybersecurity experts [5] - The trend indicates that attackers are increasingly targeting integrated tools that already have privileged access, bypassing core platforms [5]
Salesforce says some of its customers' data was accessed after Gainsight breach
TechCrunch· 2025-11-20 19:12
Core Insights - Salesforce is investigating a data breach involving certain customers' data that was compromised through applications published by Gainsight [1] - The breach is linked to Gainsight's external connection to Salesforce, with no indication of a vulnerability in the Salesforce platform itself [1] - Gainsight is conducting its own investigation into the Salesforce connection issue but has not confirmed a breach [2] Group 1: Breach Details - The hacking group ShinyHunters claims responsibility for the breach and has threatened to create a website to advertise the stolen data if Salesforce does not negotiate [5] - The hackers assert that they have stolen data from nearly a thousand companies, including sensitive information [6] - This breach is similar to a previous incident involving Salesloft, where hackers accessed connected Salesforce instances to steal sensitive data [7] Group 2: Impact on Companies - Victims of the Salesloft breach included major companies such as Allianz Life, Cloudflare, Google, and Qantas, indicating the potential scale of the impact [7] - Gainsight confirmed it was among the victims of the earlier Salesloft-linked breaches, raising questions about the origins of the current breach [8]
Cognizant selected by CEPI to transform enterprise architecture and core ERP operations
Prnewswire· 2025-11-20 09:00
Core Insights - Cognizant has been selected by the Coalition for Epidemic Preparedness Innovations (CEPI) to implement a comprehensive digital transformation program, including a new core HR and Expense Management System and support for CEPI's Salesforce platform [1][2][4] Group 1: Project Scope and Objectives - The multi-year engagement aims to enhance CEPI's digital transformation strategy by strengthening core platforms and introducing AI-enabled insights, automation, and scalable solutions to improve efficiency and reduce operational costs [2][4] - Cognizant will ensure the Salesforce platform remains robust and scalable, aligning with CEPI's organizational goals while also establishing a roadmap for enterprise architecture [4] Group 2: Partnership and Cultural Alignment - CEPI values collaboration, impact, and resilience, which align closely with Cognizant's values, making Cognizant a trusted partner for this initiative [3][5] - The selection of Cognizant followed a competitive procurement process, highlighting its technical competence and cultural alignment with CEPI [3][5] Group 3: CEPI's Mission and Goals - CEPI is focused on accelerating the development of vaccines and biologic countermeasures against epidemic and pandemic threats, with a mission to make them accessible to all [6] - CEPI has supported the development of over 70 vaccine candidates against high-risk pathogens and aims to reduce vaccine development time to just 100 days for new threats [6]
Salesforce acquires Informatica for $8B to boost AI capabilities
Fox Business· 2025-05-27 15:18
Core Viewpoint - Salesforce is acquiring Informatica for $8 billion, aiming to enhance its data management capabilities and strengthen its position in the enterprise data market [1][7]. Group 1: Acquisition Details - Salesforce will purchase all outstanding shares of Informatica at $25 per share in cash [1]. - The deal has been approved by the boards of both companies and is expected to close in fiscal year 2027 [1]. Group 2: Strategic Goals - The acquisition aims to create a unified architecture for agentic AI, enabling safe and responsible AI operations across enterprises [5]. - Salesforce CEO Marc Benioff stated that the deal will lead to the creation of the most complete, agent-ready data platform in the industry [5]. Group 3: Market Positioning - The acquisition is part of Salesforce's strategy to dominate the software-as-a-service space, following previous acquisitions like MuleSoft and Slack [8]. - The company is targeting transformative assets to maximize customer success, as stated by Robin Washington, Salesforce's chief operating and financial officer [10]. Group 4: Integration and Synergies - Salesforce plans to rapidly integrate Informatica's capabilities and unlock synergies, particularly in sectors such as public services, life sciences, healthcare, and financial services [11].