Archive / 2026-09-26
Saturday, September 26, 2026
2 briefs filed.
Vulnerabilities8 min read
Salesforce patched three Agentforce flaws that let a public web form quietly drain CRM data
Zenity Labs disclosed "SalesBleed" on September 24, 2026: three flaws that let a hidden instruction in a public lead form make Agentforce leak account records. Salesforce fixed them in August.
Prompt InjectionSalesforceAgentforce
Policy & Regulation10 min read
Spain logged the first GDPR breach blamed on an AI agent — the regulator hasn't confirmed it yet
Spain's AEPD received the first personal-data breach notification attributing the attack to an AI agent. The agency says the claim still needs analysis. Much of the coverage skipped that part.
AnalysisAEPDGDPR