Salesforce issues new security alert tied to third customer attack spree in six months

Multiple CyberScoop stories: Salesforce issued a security alert after a third wave of attacks against Experience Cloud customers tied to a group associated with ShinyHunters that has exfiltrated Salesforce data for extortion. Researchers disclosed a critical vulnerability in the widely used Java security library pac4j that poses serious downstream risks to dependent applications (no widespread exploitation reported). Microsoft’s March Patch Tuesday fixed 83 issues with no publicly known actively exploited zero-days; the FBI emphasized that basic security hygiene remains essential even as AI is