Klue Breach Lets Attackers Compromise Cybersecurity Firms via OAuth Tokens (infosecurity-magazine.com)

• At least four cybersecurity firms impacted by Klue breach
• Attackers used stolen OAuth tokens to access Salesforce data
• Icarus extortion group claimed responsibility; data release deadline set

"At least four cybersecurity firms confirmed they were affected by a breach of business intelligence platform Klue. Attackers used compromised OAuth tokens to access connected Salesforce accounts, stealing customer data. Klue detected the intrusion on June 12, 2026, and took remediation steps. The Icarus extortion group claimed responsibility."