��Threat actors are mass-scanning #Salesforce Experience Cloud sites using AuraInspector.

The tool probes the /s/sfsites/aura API and can extract CRM data if guest user permissions are too broad. Salesforce says the platform isn’t vulnerable—misconfiguration is the risk.

�� Read → https://thehackernews.com/2026/03/threat-actors-mass-scan-salesforce.html