WithSecure-Salesforce-Threat-Landscape-Report-2026.md

This WithSecure report examines the 2025 Salesforce threat landscape, documenting a sustained increase in financially motivated attacks that exploit delegated trust and identity vectors (OAuth token misuse, credential theft, AitM/QR quishing) and supply-chain compromises to exfiltrate high-value CRM data; telemetry shows URL-centric social engineering as the dominant delivery mechanism and the report concludes with governance- and identity-focused mitigations for integrations, automation, and agent-based workflows.