Klue breach lead to Salesforce data theft, Huntress affected
2026-06-19T14:51:50Z•a71249fe4bb99b3afc0ea80fc1d76f29d48fd63f24565aeabc3f6c4a9434e6d9
Android-developer-verificationCISACRMCVE-2026-20253GitHub-abuseHuntressKlueMastodonRCESalesforceSplunkVirusTotalYouTubebreachcrypto-stealerdata-thefthand-gestureintegration-credentialknown-exploited-vulnerabilitiesmalwarepatch-nowreCAPTCHAsupply-chaintwo-factor-authentication (2FA) enforcement (server)vulnerability
What happened
This feed covers multiple security developments: a Klue compromise led to a cascade of stolen integration/CRM data (including Salesforce) impacting customers such as Huntress; a cryptocurrency‑stealing malware campaign used fake GitHub activity, YouTube tutorials and VirusTotal comments to build trust for malicious trading/gambling tools; a critical unauthenticated RCE in Splunk Enterprise (CVE-2026-20253) is being actively exploited and was added to CISA’s Known Exploited Vulnerabilities list (mitigations ordered for federal agencies); product/security updates and rollouts from Google (reCAPT
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- a71249fe4bb99b3afc0ea80fc1d76f29d48fd63f24565aeabc3f6c4a9434e6d9
- Enrichment time
- 2026-06-19T14:51:50Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.