When we talk about a Salesforce breach, that's not really accurate, is it? But it is the blast radius.
Attackers are stealing OAuth tokens from connected applications, like those from #Salesloft and #Gainsight, then walking in with full access. https://loom.ly/FRI71Eo