
ShinyHunters Turned OAuth Consent Into a Master Key: The 2026 Salesforce Breach Wave
In July 2026 Microsoft detailed how ShinyHunters breached hundreds of Salesforce tenants through OAuth consent phishing, not stolen passwords. Here's how the ShinyHunters Salesforce OAuth campaign worked, who it hit, and how to defend your own SaaS stack.








