Salesloft’s GitHub Oops: Drift Data Breach Sparks Supply Chain Chaos!
Salesloft’s GitHub account fell into the wrong hands, leading to a data breach through its Drift application. The threat actors cleverly accessed the account for months, like sneaky raccoons in a garbage bin. Salesloft has since cleaned up the mess and put Drift on a timeout, hoping to avoid any further dumpster diving.
Hot Take:
Oh, Salesloft, you had one job — keep your GitHub account safe! Instead, you left the backdoor wide open, and now, 22 companies are left wondering if they should have paid extra for a security subscription. Lesson learned: Don’t be the person who gets an invite to a party they didn’t even know was happening in their own house!
Key Points:
- Salesloft’s GitHub account was compromised, leading to a data breach involving its Drift application.
- The breach allowed the threat actor, UNC6395, to access repositories and perform reconnaissance activities.
- OAuth tokens for Drift customers’ technology integrations were stolen.
- Salesloft took the Drift application offline and implemented stronger security measures.
- Salesforce has restored some integrations but not for the Drift app.
Already a member? Log in here