About this episode

This episode discusses how ShinyHunters executed a major CRM-focused attack on prominent companies using Salesforce without exploiting software vulnerabilities.

One phone call was all it took for ShinyHunters to breach some of the world's biggest brands. By exploiting Salesforce to infiltrate Google, Cisco, and many others, this group has shown just how vulnerable organizations can be when well-known SaaS platforms become the attack vector. In this special State of Cybercrime episode, Matt and David break down how ShinyHunters pulled off one of the largest CRM–focused attacks of the year without exploiting a single software vulnerability.

People in this episode

Hosts: Matt Radolec, David Gibson

Topics covered

• cybercrime
• SaaS vulnerabilities
• CRM attacks
• data breach
• cybersecurity

Keywords

• ShinyHunters
• Salesforce
• Google
• Cisco
• CRM attack
• cybersecurity
• data breach

Mentioned in this episode

Organizations: ShinyHunters, Salesforce, Google, Cisco

More episodes of State of Cybercrime

• The Canvas Breach · May 19, 2026 · 30 min
• Salesforce Aura Data Theft · March 20, 2026 · 30 min
• OpenClaw & Moltbook (w/ Moriah Hara!) · February 14, 2026 · 43 min
• The React2Shell Crisis · December 15, 2025 · 23 min
• AI-Powered Espionage · November 24, 2025 · 24 min
• Black Hat Cartels · October 31, 2025 · 23 min

Explore listener stats, chart rankings, contacts and more on the State of Cybercrime podcast page.