Long-running Data Theft Campaign Targeting Salesforce, ServiceNow

A long-running data theft campaign, 'City-Forum', has been targeting Salesforce and ServiceNow users since March 2025, using custom tooling. This campaign poses a significant threat to organizations across various sectors. Affected users should be vigilant and take necessary security measures. It is essential to stay informed about the latest security threats and updates.