Salesforce will keep working on security after Uber hack

Salesforce co-CEO Marc Benioff said the cloud software company still has a lot of work to do in cybersecurity following Uber’s attack involving Salesforce’s Slack chat app.

Uber Say On Monday, it identified a hacking group called Lapsus$ as being behind last week’s cyberattack, noting that other victims the group has attacked this year include Cisco, Nvidia, Okta and Samsung.Microsoft also Say Lapsus$ accessed one of its accounts.

According to Uber, the attackers may have purchased the passwords of the company’s contractors on the dark web following the malware attack, and the contractors accepted two-factor authentication requests. The ride-sharing company said the attackers downloaded some Slack messages and posted a note on a Slack channel “as many of you saw.”

Hackers often use so-called social engineering, which involves exploiting trusted individuals rather than just pursuing hardware and software.

“There is no finish line when it comes to security and social engineering,” Benioff said in a news conference Tuesday at the Salesforce Dreamforce conference in San Francisco. “We need to do something to help our customers prevent these kinds of problems.”

Salesforce has seen its systems exploited in the past. In 2007, a hacker it is said Obtain email addresses stored in Salesforce and use them to track automated data processing customers and other Salesforce customers. In June, Salesforce’s Heroku division Say A hacker obtained account passwords and some source code.

“We went through pretty much every possible scenario,” Benioff said. “We have a lot to do and we will keep working hard.”

Bret Taylor, Salesforce’s other co-CEO, said most of the company’s engineering teams are committed to security and trust. Trust was one of Salesforce’s original values ​​when it was founded in 1999, Taylor said.

watch: Salesforce was born in the 2001 recession, says chairman and co-CEO Marc Benioff