The Salesloft/Drift OAuth Breach: When Your SaaS Integrations Become Attack Vectors
Executive Summary The Salesloft Drift OAuth breach (August 2025) compromised 700+ organizations through weaponized OAuth tokens, demonstrating why product security teams must threat model SaaS integrations as untrusted attack surfaces. This analysis examines the technical mechanics, architectural anti-patterns, and secure-by-design lessons for teams building or evaluating third-party integrations. The Attack: Six Months of Silent Credential … Read more