Inherited Agents Expose Governance Gaps in Enterprise AI Deployments

The City-Forum data-theft operation has been exploiting vulnerable Salesforce and ServiceNow instances worldwide since March 2025, turning public-facing intake systems into entry points for internal AI agents, according to the report. The campaign exposes governance gaps in enterprise AI deployments and points to a need for tighter security controls on inherited agents.

A shocking data-theft operation, City-Forum, has been exploiting vulnerable Salesforce and ServiceNow instances worldwide since March 2025, revealing alarming gaps in enterprise AI deployments. This operation cleverly turns public-facing intake systems into entry points for internal agents, highlighting a critical need for tighter security controls.