'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing

A vulnerability, referred to as Salesbleed, allows attackers to exploit Salesforce agents and use them to enable phishing attacks on Slack. This is made possible by Agentic AI, which can bypass security controls and smuggle malicious instructions into internal communications channels. The AI can move these instructions across multiple applications and from the web, ultimately inserting them into trusted channels. This capability poses a significant threat to the security of internal communications. The Salesbleed exploit highlights the potential risks associated with the integration of multiple apps and services. Attackers can leverage this vulnerability to launch targeted phishing attacks on users within an organization.