Sunday, September 27, 2026 · 3 of 5

1. Salesforce's Agentforce had three "SalesBleed" zero-click flaws letting poisoned Web-to-Lead forms exfiltrate CRM data and hijack Slack integrations for phishing — patched in August, publicly disclosed this week

   Sep 25Security