FBI Alert, Salesforce Security & Threat Actors – 09/13/2025

September 12, 2025
FBI Alert, Salesforce Security & Threat Actors – 09/13/2025

Today’s security intelligence digest is led by a critical FBI alert concerning two cybercriminal groups actively targeting Salesforce platforms for data theft and extortion. This direct threat to enterprise cloud environments underscores the evolving tactics of sophisticated actors. We also examine the surveillance technologies being deployed by government agencies and the advancing capabilities of AI in strategic manipulation. Here is the essential information you need to protect your organization.

Critical Security Alert

  • FBI Warns of UNC6040 and UNC6395 Targeting Salesforce Platforms in Data Theft Attacks: The FBI has issued a flash alert warning that cybercriminal groups UNC6040 and UNC6395 are actively targeting Salesforce platforms in data theft and extortion campaigns. Read more

Threat Intelligence

  • FBI Warns of UNC6040 and UNC6395 Targeting Salesforce Platforms in Data Theft Attacks: The FBI has issued a flash alert warning that cybercriminal groups UNC6040 and UNC6395 are actively targeting Salesforce platforms in data theft and extortion campaigns. Read more

Security Tools & Best Practices

  • Here’s the tech powering ICE’s deportation crackdown: A report details the extensive use of surveillance technology by U.S. ICE, including phone spyware, facial recognition, and forensic hacking tools, to power its operations. Read more

Emerging Security Technologies

  • GPT-5 dominated 210 Werewolf games with superior manipulation and strategic thinking: In a new benchmark, GPT-5 demonstrated superior manipulation and strategic thinking by dominating human players in the social deduction game “Werewolf,” highlighting advanced AI capabilities. Read more
  • “Aivilization” experiment lets over 22,000 AI agents model what future societies could become: A Hong Kong university is running the “Aivilization” experiment, using over 22,000 AI agents to simulate and model the development of future human societies. Read more
Distribute Intel
Chris Armour
Director of Software Engineering
Chris Armour
The Breaker & Builder.

Operating on the philosophy that 'you can't build a secure system if you don't know how to break it,' Chris leads our engineering division. A top 1% National Cyber League competitor, he hardens our digital infrastructure against the very exploits he has mastered.

Press & Media

Media Inquiries

For expert commentary, interview requests, or high-res assets regarding this announcement, initialize the terminal.

Initialize Terminal

Initiate
Deployment.

Whether you need a full adversarial facility audit or an executive resilience protocol for your leadership team.

Secure the Facility (Assessments)
Secure the Mind (Coaching/Speaking)