Mystery attacker spent a year raiding Salesforce and ServiceNow portals
AI disclosure
Summary
Custom tools harvested whatever over-permissioned guest accounts would surrender