BeyondTrust, LastPass Impacted by Klue-Salesforce Incident

More than a dozen customers of competitive-intelligence vendor Klue have confirmed that attackers stole data from their connected Salesforce instances, according to SecurityWeek. Security vendors BeyondTrust and LastPass are among the newly confirmed victims, with the breach traced to abuse of Klue’s OAuth integration with Salesforce. The incident, first disclosed earlier this month, continues to widen as more affected organizations come forward. Organizations that connected the Klue Battlecards app to Salesforce should review access logs for anomalous activity tied to its OAuth tokens.