supply-chain
Klue OAuth breach victim list grows as Icarus hackers claim attack
High
Summary
A security breach at Klue, a market intelligence platform, has resulted in the theft of OAuth tokens used to connect to customer Salesforce environments. The attack, attributed to the ‘Icarus’ extortion group, impacted multiple organizations including Recorded Future and Tanium, leading to the exfiltration of sensitive Salesforce data. Klue is working to remediate the situation and advise customers to remain vigilant against potential follow-on attacks.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data