SalesBleed: Zero-Click Chain Exfiltrating Data via DNS from Agentforce via Indirect Prompt Injection
Security researchers at Zenity demonstrated a proof-of-concept attack chain, dubbed SalesBleed, that exfiltrates Salesforce data through DNS queries by exploiting an indirect prompt injection in the A…