Cybersecurity Firms Impacted by Klue Supply Chain Attack

Cybersecurity firms Huntress and Recorded Future were hit by a supply chain attack targeting market intelligence platform Klue that began on June 11th. Hackers accessed Klue's backend servers and pushed malicious code to harvest OAuth tokens, then used the Salesforce integration to exfiltrate business data including customer contacts, price quotes, and sales information over a 24-hour period. The attack has been attributed to a new extortion group called Icarus, following a pattern similar to previous incidents linked to ShinyHunters and UNC6395, though both affected firms confirmed no threat data, passwords, or engineering systems were compromised.