More Cybersecurity Firms Disclose Impact From Klue Hack

HackerOne, Huntress, Jamf, OneTrust, Recorded Future, Snyk, and Tanium are among the affected Klue customers. The post More Cybersecurity Firms Disclose Impact From Klue Hack appeared first on SecurityWeek .

The article reports that multiple cybersecurity vendors, including HackerOne, Huntress, Jamf, OneTrust, Recorded Future, Snyk, and Tanium, were impacted by a supply chain attack on market intelligence platform Klue that allowed attackers to abuse OAuth integrations to exfiltrate Salesforce CRM data from customer environments.[1][2][4][5] Public disclosures indicate that the stolen information is primarily business and sales-related contact and opportunity data, with no direct compromise of core security products or infrastructure reported so far.[1][3][5] From a CyberSE.AI perspective, this incident highlights how third-party SaaS and integration providers can become indirect attack paths into security-sensitive organizations’ data, even when their own systems are uncompromised. Organizations building or operating AI systems should treat SaaS integrations and data connectors as part of their AI supply chain, applying rigorous third-party risk management, OAuth scoping, and continuous monitoring of connected apps that may feed, train, or enrich AI-driven workflows.