AGENDADreamforce 2026 • September 15–17 • San Francisco + Salesforce+View event
Featured

SalesBleed is patched. Now prove external data never became an instruction

Three remediated flaws showed how a public lead could induce Agentforce to query internal data, trigger DNS-based exfiltration or publish phishing in Slack. Post-patch work must test the composition of untrusted inputs, tool reach and write actions—not merely confirm a version.

Read article
A public form sends a luminous record into a CRM data lattice; hidden instructions try to divert a trusted agent node toward an external DNS endpoint as a security boundary closes the route.

OrbTrail

Latest

32 stories found