Salesforce Security in the Age of Identity-Based Attacks

Cybercriminal groups such as Scattered Spider, ShinyHunters, and UNC6040 are changing how enterprise attacks unfold. Instead of relying on traditional software exploits, these groups often target identities, permissions, OAuth access, third-party applications, and trusted systems to gain access to sensitive data.

For Salesforce teams, that creates direct risk across users, Connected Apps, metadata, integrations, data access, and recovery readiness. This datasheet explains how identity-based attacks affect Salesforce environments and what organizations should assess before trusted access becomes an attack path.