⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More

The weekly recap centres on the Salesloft–Drift breach, where attackers stole OAuth tokens and accessed Salesforce data from some of the biggest names in tech. It notes that Drift will be taken offline “in the very near future” to review and bolster security, with the Drift chatbot on customer websites made unavailable. Cloudflare and Google Workspace were among the organisations impacted, alongside PagerDuty, Palo Alto Networks, Proofpoint, SpyCloud, Tanium, Tenable and Zscaler.

According to Google and Cloudflare, the activity has been attributed to a threat cluster tracked as UNC6395 and GRUB1, respectively. The piece also flags high-risk CVEs and ongoing exploitation, underscoring the evolving risk landscape facing enterprise integrations. Published on 8 September 2025 by Ravie Lakshmanan, the recap weaves in additional security insights and trendlines to help defenders stay ahead.