BeyondTrust, LastPass Impacted by Klue-Salesforce Incident

LastPass and BeyondTrust are among over a dozen cybersecurity firms affected by a breach at competitive intelligence platform Klue, where attackers used a compromised credential to generate OAuth tokens and access customers' Salesforce instances. The threat actor known as Icarus used automated scripts to exfiltrate business contact information and customer relationship management data, though companies emphasize their core products and services weren't compromised. Salesforce and Gong have since disabled the Klue integration, but researchers estimate numerous other Klue customers were likely impacted and have yet to come forward.