The Drift tool taken offline after cyberattacks shows how vulnerable integrated business platforms remain. Salesloft shut down the AI chatbot after attackers exploited stolen tokens to breach hundreds of Salesforce systems. The move aimed to stop ongoing exploitation and secure customer data.
How the Breach Happened
Hackers used compromised OAuth tokens issued through Drift to access Salesforce environments. This tactic let them infiltrate hundreds of organizations, including well-known tech companies.
Salesloft disabled Drift immediately to investigate and strengthen its defenses. Salesforce also suspended all Drift integrations and instructed customers to revoke active tokens as a precaution.
Warnings From the Industry
Cloudflare warned that attackers armed with stolen credentials could launch further targeted attacks. Google Threat Intelligence and Mandiant joined the investigation, linking the incident to UNC6395, a hacker group that claimed responsibility.
The breach showed how a single weak link in a supply chain can give attackers broad access to enterprise systems. Salesloft confirmed Drift will remain offline until it passes stronger security checks.
Broader Risks for AI Tools
This incident highlights growing risks tied to AI-powered enterprise platforms. As businesses adopt chatbots and automation tools, each integration creates new attack surfaces. A single compromised connection can spread across networks.
Security experts stress the importance of continuous monitoring and token management. Revoking unused or compromised access keys has become essential for preventing large-scale breaches.
Conclusion
The Drift tool taken offline after cyberattacks reveals the dangers of supply chain threats in AI-driven systems. Attackers exploited stolen tokens to breach Salesforce accounts, forcing emergency shutdowns. This event shows why companies must secure every integration, enforce stricter access controls, and prepare for rapid response.
0 responses to “Drift Tool Taken Offline After Cyberattacks”