Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking sales A now-fixed flaw in Salesforce’s Agentforce could have allowed external attackers to steal sensitive customer data via prompt injection, according to security researchers who published a proof-of-concept attack on Thursday. They were aided by an expired trusted domain that they were able to buy for a measly five bucks. …
...Salesforce spokesperson [...] emailed statement. "The security landscape for prompt injection remains a complex and evolving area, and we continue to invest in strong security controls and work closely with the research community to help protect our customers as these types of issues surface."
Translation (beware, spicy): We have no clue what we are doing. We just stuffed an internet connected program we do not understand with all your data and our data. We are baffled every time the program spills beans. We have ordered many buckets for the spill, but cannot provide enough buckets to capture the Chili Con Carne and are peppered from outside that we are spilling even more beans than we put in. At least we have good Chili Con Carne feeding the community!
Earlier in the week, there was another AI phone advert on the tele - this specific one was for Googles latest, the feature being promoted was the AI’s ability to determine a message from someone was a “friend” and thus the AI could auto reply saving you the effort.
The particular feature was receiving a message asking for a phone number from your contacts. Both my wife and myself said NO way; we both have numbers in our phones of people/“friends” who for whatever reasons should not be given each other’s phone numbers. It looks like the AI assistants are going to be introducing a whole new attach vector…
Oh, really? As reported by El Reg - https://www.theregister.com/2025/09/26/salesforce_class_actions/ - "Salesforce is facing a wave of lawsuits in the wake of a cyberattack that exposed customer data" - regardless of the outcome, more heads would have helped them avoid that kind of problem in the first place.
