Browsing: Agentforce

Enterprise web forms designed to ingest data from unknown parties are now active breach vectors. The disclosure of SalesBleed, a series of vulnerabilities in Salesforce Agentforce, confirms that a single poisoned record can trigger zero-click data exfiltration – no privilege escalation, no user click, no attachment. The entry point is the most basic form on…

Salesforce has quietly patched a set of AI agent flaws that let attackers pull customer data out of live CRM systems without a single click from a victim. Zenity Labs, an AI agent security research firm, disclosed the vulnerabilities on September 24, 2026, under the name “SalesBleed,” according to Infosecurity Magazine. The flaws lived inside…

Security researchers at Zenity Labs have disclosed a set of zero-click vulnerabilities in Salesforce Agentforce that allowed attackers to silently exfiltrate sensitive data related to customer relationship management (CRM) without any interaction from the victim and without the attacker ever authenticating into the target’s Salesforce environment.

Salesforce this week introduced its first purpose-built CRM reasoning model, called Koa, at Dreamforce 2026 in San Francisco — a product that embodies the company’s strategic conviction that enterprise AI needs domain-specific models rather than general-purpose large language models. The problem is that Koa’s most specific performance claim, that it “matches or exceeds leading models…

Salesforce, Inc. CRM is set to release its second-quarter fiscal 2027 earnings on Aug. 26. Investors will be watching closely to see whether the company’s heavy focus on artificial intelligence (AI) is starting to deliver a meaningful boost to its financial performance.