Salesbleed exploit targets Salesforce AI agents and Slack
Dark Reading reports on an exploit dubbed "Salesbleed," where agentic AI systems in Salesforce are leveraged to smuggle arbitrary instructions from the web across interconnected applications, delivering phishing attacks directly into trusted internal Slack channels. Claims are as reported; this summary makes no determination about accuracy or significance.
- First detected
- Sep 24, 2026
- Last updated
- Sep 24, 2026
Moderate confidence
Based on a single independent report.
Limited corroboration
1 reporting source
What does this mean?
Corroboration measures how many genuinely independent sources support the event. Confidence measures how reliable the available evidence appears.
Stable
No recent reporting has materially changed the known facts.
Follow this development to see meaningful updates as new evidence emerges.
Save keeps this for later. Follow tracks meaningful changes as new evidence emerges — it shapes your Following Feed, alerts, and digest eligibility, and doesn't promise an instant notification.
Why it matters
The attack illustrates how autonomous multi-app AI agents can cross enterprise security boundaries, turning external web-based prompt injections into trusted internal communications without triggering conventional perimeter defenses.
Coverage
Independent reporting
Primary/vendor sources vs independent reporting
Primary / vendor source: information published directly by the company, organization, government body or project involved. Useful as a primary source, but not independent confirmation.
Independent reporting: reporting or analysis from a source independent of the organization making the underlying claim.
How this developed
Sep 24, 2026
Development detected
New reporting added
'Salesbleed' Exploits Salesforce Agents to Enable Slack PhishingDark ReadingIndependent reporting
Related Intelligence
- DevelopmentNewAlso involving Salesforce
Salesforce agrees to acquire Cresta Intelligence
Salesforce has agreed to acquire Cresta Intelligence Inc., a venture-backed startup providing AI customer service software. While Salesforce did not disclose financial terms in its announcement, The Information reports the transaction is valued at $2.7 billion. Claims are as reported; this summary makes no determination about accuracy or significance.
- DevelopmentNewAlso involving Salesforce
Salesforce plans new fees for external AI agents
Salesforce plans to require enterprise customers to register external AI agents, such as Anthropic's Claude, beginning as early as next month, according to The Information. The registration process serves as an initial step toward charging fees whenever third-party AI agents update or analyze data stored inside Salesforce apps, allowing the vendor to monetize users who deploy external AI rather than its proprietary tools. Claims are as reported; this summary makes no determination about accuracy or significance.
- Report
Jensen Huang resigns as Nvidia CEO after espionage scandal wipes out $1.4 trillion in market value
The Decoder reports that Jensen Huang has resigned immediately as CEO, president, and board member of Nvidia. The executive departure follows an alleged espionage scandal that reportedly eliminated $1.4 trillion in market valuation, according to a reported statement.
The Decoder - Report
Nvidia CEO Jensen Huang Resigns, Creating Uncertainty for the AI Sector
Nvidia CEO and co-founder Jensen Huang has resigned, the company announced in a statement. Finance chief Colette Kress has been named interim CEO. The resignation follows a board-initiated independent investigation announced three days earlier into reports that Huang was targeted by a foreign intelligence effort, following U.S. intelligence conclusions that he had formed a close relationship with an individual suspected of spying for a foreign government.
The Information