When Guest Access Becomes an Attack Surface: A Technical Analysis of the City-Forum Campaign

Wait 5 sec.

Learn how attackers enumerated Salesforce Experience Cloud and ServiceNow portals — and how defenders can detect and prevent the same abuse.When Guest Access Becomes an Attack SurfaceModern enterprise portals increasingly expose APIs to unauthenticated users. The problem is not necessarily that those APIs are vulnerable. The problem is that the anonymous identity behind them may have been granted more access than the organization realizes.