More Cybersecurity Firms Disclose Impact From Klue Hack

At least nine organizations, including several cybersecurity firms like HackerOne, Huntress, and Recorded Future, have disclosed they were affected by a supply chain attack on market intelligence platform Klue. Attackers used compromised legacy credentials to access Klue's systems and steal OAuth tokens for Salesforce integrations, allowing them to exfiltrate business data including names, emails, and contact information from customers' Salesforce instances between June 11th and 12th. A threat actor called Icarus has claimed responsibility and is threatening to release the stolen data on June 22nd unless the affected companies engage in negotiations.