The Federal Bureau of Investigation (FBI), in coordination with DHS/CISA, has released a new FLASH Alert (FLASH-20250912-001) warning organizations of two cybercriminal groups—UNC6040 and UNC6395—actively compromising Salesforce instances to steal sensitive data and extort victims. According to the alert, “Both groups have recently been observed targeting organizations’ Salesforce platforms via different initial access mechanisms.” The FBI urges enterprises to review the provided indicators of c...