Hackers Exploited Salesforce Zero-Day in Facebook Phishing Attack

The attackers chained a flaw dubbed "PhishForce," to bypass Salesforce's sender verification safeguards and quirks in Facebook's web games platform to mass-send phishing emails.