One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according to research published this week by agent security platform Reco.

The activity, which Reco has named the City Forum campaign after a domain tied to the attacker’s IP address, traces back to one server: 158.220.87.79, hosted on a

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus 9000 switches

Attack Update: Top 5 Attack-IPs auf doode.info – 02.10.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 193.32.162.135 — 974 requests (recent log) 89.167.35.212 — 447 requests (recent log) 80.94.95.211 — 198 requests (recent

Study: Blue light impairs the eye’s ability to distinguish fine detail most

Study: Blue light impairs the eye’s ability to distinguish fine detail most Source: Hacker News