{"id":1659,"date":"2026-06-20T07:20:26","date_gmt":"2026-06-20T00:20:26","guid":{"rendered":"https:\/\/vncybers.vn\/klue-xac-nhan-su-co-oauth-nhom-icarus-bi-cao-buoc-danh-cap-du-lieu-salesforce-cua-nhieu-doanh-nghiep\/"},"modified":"2026-06-20T07:20:26","modified_gmt":"2026-06-20T00:20:26","slug":"klue-xac-nhan-su-co-oauth-nhom-icarus-bi-cao-buoc-danh-cap-du-lieu-salesforce-cua-nhieu-doanh-nghiep","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/klue-xac-nhan-su-co-oauth-nhom-icarus-bi-cao-buoc-danh-cap-du-lieu-salesforce-cua-nhieu-doanh-nghiep\/","title":{"rendered":"Klue x\u00e1c nh\u1eadn s\u1ef1 c\u1ed1 OAuth, nh\u00f3m Icarus b\u1ecb c\u00e1o bu\u1ed9c \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u Salesforce c\u1ee7a nhi\u1ec1u doanh nghi\u1ec7p"},"content":{"rendered":"

N\u1ec1n t\u1ea3ng ph\u00e2n t\u00edch th\u1ecb tr\u01b0\u1eddng Klue \u0111\u00e3 x\u00e1c nh\u1eadn m\u1ed9t s\u1ef1 c\u1ed1 b\u1ea3o m\u1eadt li\u00ean quan \u0111\u1ebfn h\u1ea1 t\u1ea7ng t\u00edch h\u1ee3p, trong \u0111\u00f3 k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 l\u1ea5y OAuth token d\u00f9ng \u0111\u1ec3 k\u1ebft n\u1ed1i v\u1edbi c\u00e1c m\u00f4i tr\u01b0\u1eddng Salesforce c\u1ee7a kh\u00e1ch h\u00e0ng. V\u1ee5 vi\u1ec7c \u0111\u01b0\u1ee3c ch\u00fa \u00fd h\u01a1n khi nh\u00f3m t\u1ed1ng ti\u1ec1n Icarus c\u00f4ng khai tuy\u00ean b\u1ed1 \u0111\u1ee9ng sau chi\u1ebfn d\u1ecbch v\u00e0 cho bi\u1ebft d\u1eef li\u1ec7u t\u1eeb nhi\u1ec1u phi\u00ean b\u1ea3n Salesforce c\u1ee7a c\u00e1c t\u1ed5 ch\u1ee9c li\u00ean quan \u0111\u00e3 b\u1ecb tr\u00edch xu\u1ea5t.<\/p>\n

\"Minh<\/p>\n

Theo BleepingComputer, Klue ph\u00e1t hi\u1ec7n ho\u1ea1t \u0111\u1ed9ng tr\u00e1i ph\u00e9p v\u00e0o ng\u00e0y 12\/06\/2026 tr\u00ean m\u1ed9t ph\u1ea7n h\u1ea1 t\u1ea7ng t\u00edch h\u1ee3p. C\u00f4ng ty cho bi\u1ebft \u0111i\u1ec3m v\u00e0o ban \u0111\u1ea7u li\u00ean quan \u0111\u1ebfn m\u1ed9t th\u00f4ng tin x\u00e1c th\u1ef1c c\u0169 b\u1ecb x\u00e2m ph\u1ea1m, t\u1eeb \u0111\u00f3 k\u1ebb t\u1ea5n c\u00f4ng l\u1ea5y \u0111\u01b0\u1ee3c OAuth token d\u00f9ng cho c\u00e1c n\u1ec1n t\u1ea3ng b\u00ean th\u1ee9 ba, bao g\u1ed3m Salesforce. Klue kh\u1eb3ng \u0111\u1ecbnh hi\u1ec7n ch\u01b0a c\u00f3 b\u1eb1ng ch\u1ee9ng cho th\u1ea5y n\u1ed9i dung \u0111\u01b0\u1ee3c l\u01b0u tr\u1ef1c ti\u1ebfp trong n\u1ec1n t\u1ea3ng Klue b\u1ecb \u1ea3nh h\u01b0\u1edfng, nh\u01b0ng d\u1eef li\u1ec7u trong m\u1ed9t s\u1ed1 m\u00f4i tr\u01b0\u1eddng kh\u00e1ch h\u00e0ng k\u1ebft n\u1ed1i qua t\u00edch h\u1ee3p \u0111\u00e3 b\u1ecb truy c\u1eadp.<\/p>\n

OAuth token tr\u1edf th\u00e0nh \u0111i\u1ec3m y\u1ebfu trong chu\u1ed7i t\u00edch h\u1ee3p SaaS<\/h2>\n

OAuth token th\u01b0\u1eddng \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 gi\u00fap \u1ee9ng d\u1ee5ng truy c\u1eadp d\u1ecbch v\u1ee5 b\u00ean th\u1ee9 ba m\u00e0 kh\u00f4ng c\u1ea7n l\u01b0u m\u1eadt kh\u1ea9u ng\u01b0\u1eddi d\u00f9ng. Tuy nhi\u00ean, khi token b\u1ecb \u0111\u00e1nh c\u1eafp, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 h\u00e0nh \u0111\u1ed9ng nh\u01b0 m\u1ed9t \u1ee9ng d\u1ee5ng h\u1ee3p l\u1ec7, truy v\u1ea5n API v\u00e0 thu th\u1eadp d\u1eef li\u1ec7u trong ph\u1ea1m vi quy\u1ec1n \u0111\u00e3 \u0111\u01b0\u1ee3c c\u1ea5p. \u0110\u00e2y l\u00e0 l\u00fd do c\u00e1c s\u1ef1 c\u1ed1 li\u00ean quan \u0111\u1ebfn t\u00edch h\u1ee3p SaaS th\u01b0\u1eddng lan r\u1ed9ng nhanh, \u0111\u1eb7c bi\u1ec7t khi m\u1ed9t nh\u00e0 cung c\u1ea5p trung gian k\u1ebft n\u1ed1i \u0111\u1ebfn nhi\u1ec1u kh\u00e1ch h\u00e0ng doanh nghi\u1ec7p.<\/p>\n

ReliaQuest v\u00e0 Huntress cho bi\u1ebft k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 l\u1ea1m d\u1ee5ng th\u00f4ng tin OAuth li\u00ean quan \u0111\u1ebfn t\u00edch h\u1ee3p Klue Battlecards \u0111\u1ec3 truy c\u1eadp Salesforce v\u00e0 th\u1ef1c hi\u1ec7n truy v\u1ea5n API trong th\u1eddi gian d\u00e0i. Huntress c\u0169ng x\u00e1c nh\u1eadn ch\u00ednh m\u00f4i tr\u01b0\u1eddng Salesforce c\u1ee7a h\u1ecd b\u1ecb \u1ea3nh h\u01b0\u1edfng, trong \u0111\u00f3 d\u1eef li\u1ec7u b\u1ecb l\u1ea5y \u0111i g\u1ed3m th\u00f4ng tin li\u00ean h\u1ec7 kinh doanh, trao \u0111\u1ed5i b\u00e1n h\u00e0ng, d\u1eef li\u1ec7u gi\u00e1 v\u00e0 m\u1ed9t s\u1ed1 b\u1ea3n ghi li\u00ean quan.<\/p>\n

Icarus g\u00e2y \u00e1p l\u1ef1c b\u1eb1ng m\u00f4 h\u00ecnh t\u1ed1ng ti\u1ec1n d\u1eef li\u1ec7u<\/h2>\n

Nh\u00f3m Icarus \u0111\u01b0\u1ee3c cho l\u00e0 \u0111\u00e3 \u0111\u0103ng th\u00f4ng b\u00e1o tr\u00ean trang r\u00f2 r\u1ec9 d\u1eef li\u1ec7u, tuy\u00ean b\u1ed1 \u0111\u00e3 tr\u00edch xu\u1ea5t Salesforce c\u1ee7a m\u1ed9t s\u1ed1 c\u00f4ng ty l\u00e0 \u0111\u1ed1i t\u00e1c ho\u1eb7c kh\u00e1ch h\u00e0ng li\u00ean quan \u0111\u1ebfn Klue. Danh s\u00e1ch t\u1ed5 ch\u1ee9c t\u1ef1 c\u00f4ng b\u1ed1 b\u1ecb \u1ea3nh h\u01b0\u1edfng \u0111\u01b0\u1ee3c BleepingComputer ghi nh\u1eadn g\u1ed3m Recorded Future, Tanium, Jamf, Sprout Social, Gong v\u00e0 Insurity.<\/p>\n

Ph\u1ea7n l\u1edbn c\u00e1c t\u1ed5 ch\u1ee9c cho bi\u1ebft s\u1ef1 c\u1ed1 kh\u00f4ng \u1ea3nh h\u01b0\u1edfng tr\u1ef1c ti\u1ebfp \u0111\u1ebfn n\u1ec1n t\u1ea3ng c\u1ed1t l\u00f5i, h\u1ea1 t\u1ea7ng n\u1ed9i b\u1ed9, h\u1ec7 th\u1ed1ng thanh to\u00e1n ho\u1eb7c s\u1ea3n ph\u1ea9m c\u1ee7a h\u1ecd. Tuy v\u1eady, d\u1eef li\u1ec7u li\u00ean h\u1ec7 kinh doanh, n\u1ed9i dung trao \u0111\u1ed5i v\u1edbi kh\u00e1ch h\u00e0ng v\u00e0 metadata b\u00e1n h\u00e0ng v\u1eabn c\u00f3 th\u1ec3 b\u1ecb l\u1ea1m d\u1ee5ng trong c\u00e1c chi\u1ebfn d\u1ecbch l\u1eeba \u0111\u1ea3o ti\u1ebfp n\u1ed1i, gi\u1ea3 m\u1ea1o \u0111\u1ed1i t\u00e1c, \u0111e d\u1ecda c\u00f4ng b\u1ed1 d\u1eef li\u1ec7u ho\u1eb7c t\u1ea5n c\u00f4ng x\u00e3 h\u1ed9i nh\u1eafm v\u00e0o \u0111\u1ed9i ng\u0169 kinh doanh v\u00e0 h\u1ed7 tr\u1ee3.<\/p>\n

Doanh nghi\u1ec7p c\u1ea7n ki\u1ec3m tra l\u1ea1i quy\u1ec1n t\u00edch h\u1ee3p<\/h2>\n

S\u1ef1 c\u1ed1 Klue cho th\u1ea5y r\u1ee7i ro kh\u00f4ng ch\u1ec9 n\u1eb1m \u1edf m\u1eadt kh\u1ea9u t\u00e0i kho\u1ea3n, m\u00e0 c\u00f2n \u1edf token, kh\u00f3a API v\u00e0 quy\u1ec1n truy c\u1eadp \u0111\u01b0\u1ee3c c\u1ea5p cho c\u00e1c \u1ee9ng d\u1ee5ng k\u1ebft n\u1ed1i. V\u1edbi c\u00e1c h\u1ec7 th\u1ed1ng CRM nh\u01b0 Salesforce, m\u1ed9t t\u00edch h\u1ee3p t\u01b0\u1edfng nh\u01b0 ph\u1ee5c v\u1ee5 quy tr\u00ecnh b\u00e1n h\u00e0ng c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh \u0111\u01b0\u1eddng d\u1eabn \u0111\u1ebfn d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m n\u1ebfu kh\u00f4ng \u0111\u01b0\u1ee3c gi\u1edbi h\u1ea1n quy\u1ec1n, gi\u00e1m s\u00e1t truy v\u1ea5n b\u1ea5t th\u01b0\u1eddng ho\u1eb7c xoay v\u00f2ng th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u1ecbnh k\u1ef3.<\/p>\n

C\u00e1c t\u1ed5 ch\u1ee9c n\u00ean r\u00e0 so\u00e1t to\u00e0n b\u1ed9 \u1ee9ng d\u1ee5ng OAuth \u0111ang k\u1ebft n\u1ed1i v\u1edbi Salesforce v\u00e0 c\u00e1c n\u1ec1n t\u1ea3ng SaaS tr\u1ecdng y\u1ebfu, thu h\u1ed3i token kh\u00f4ng c\u00f2n c\u1ea7n thi\u1ebft, \u00e1p d\u1ee5ng nguy\u00ean t\u1eafc \u0111\u1eb7c quy\u1ec1n t\u1ed1i thi\u1ec3u, b\u1eadt c\u1ea3nh b\u00e1o cho kh\u1ed1i l\u01b0\u1ee3ng truy v\u1ea5n API b\u1ea5t th\u01b0\u1eddng, ki\u1ec3m tra log truy c\u1eadp t\u1eeb ng\u00e0y 12\/06\/2026 tr\u1edf \u0111i v\u00e0 chu\u1ea9n b\u1ecb k\u1ecbch b\u1ea3n th\u00f4ng b\u00e1o kh\u00e1ch h\u00e0ng n\u1ebfu d\u1eef li\u1ec7u li\u00ean h\u1ec7 ho\u1eb7c trao \u0111\u1ed5i th\u01b0\u01a1ng m\u1ea1i b\u1ecb \u1ea3nh h\u01b0\u1edfng.<\/p>\n

B\u00e0i h\u1ecdc cho h\u1ec7 sinh th\u00e1i SaaS<\/h2>\n

C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0o t\u00edch h\u1ee3p SaaS \u0111ang tr\u1edf th\u00e0nh l\u1ef1a ch\u1ecdn h\u1ea5p d\u1eabn v\u00ec ch\u00fang c\u00f3 th\u1ec3 v\u01b0\u1ee3t qua l\u1edbp b\u1ea3o v\u1ec7 \u0111\u0103ng nh\u1eadp truy\u1ec1n th\u1ed1ng. Khi doanh nghi\u1ec7p ng\u00e0y c\u00e0ng d\u1ef1a v\u00e0o \u1ee9ng d\u1ee5ng \u0111\u00e1m m\u00e2y, CRM, c\u00f4ng c\u1ee5 ph\u00e2n t\u00edch th\u1ecb tr\u01b0\u1eddng v\u00e0 t\u1ef1 \u0111\u1ed9ng h\u00f3a b\u00e1n h\u00e0ng, m\u1ed7i token \u0111\u01b0\u1ee3c c\u1ea5p c\u1ea7n \u0111\u01b0\u1ee3c xem nh\u01b0 m\u1ed9t danh t\u00ednh c\u00f3 quy\u1ec1n truy c\u1eadp d\u1eef li\u1ec7u th\u1ef1c s\u1ef1, kh\u00f4ng ph\u1ea3i ch\u1ec9 l\u00e0 chi ti\u1ebft k\u1ef9 thu\u1eadt ph\u1ee5 tr\u1ee3.<\/p>\n

V\u1ee5 Klue c\u0169ng nh\u1ea5n m\u1ea1nh nhu c\u1ea7u qu\u1ea3n tr\u1ecb danh t\u00ednh m\u00e1y, ki\u1ec3m k\u00ea \u1ee9ng d\u1ee5ng b\u00ean th\u1ee9 ba v\u00e0 \u0111\u00e1nh gi\u00e1 \u0111\u1ecbnh k\u1ef3 ph\u1ea1m vi quy\u1ec1n c\u1ee7a t\u1eebng t\u00edch h\u1ee3p. \u0110\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng cu\u1ed1i v\u00e0 kh\u00e1ch h\u00e0ng c\u1ee7a c\u00e1c doanh nghi\u1ec7p b\u1ecb \u1ea3nh h\u01b0\u1edfng, c\u1ea3nh gi\u00e1c tr\u01b0\u1edbc email gi\u1ea3 m\u1ea1o, l\u1eddi m\u1eddi h\u1ecdp b\u1ea5t th\u01b0\u1eddng ho\u1eb7c y\u00eau c\u1ea7u x\u00e1c minh th\u00f4ng tin th\u01b0\u01a1ng m\u1ea1i l\u00e0 bi\u1ec7n ph\u00e1p c\u1ea7n thi\u1ebft trong giai \u0111o\u1ea1n sau s\u1ef1 c\u1ed1.<\/p>\n

VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb BleepingComputer, Klue, Huntress v\u00e0 ReliaQuest<\/em><\/p>","protected":false},"excerpt":{"rendered":"

N\u1ec1n t\u1ea3ng ph\u00e2n t\u00edch th\u1ecb tr\u01b0\u1eddng Klue \u0111\u00e3 x\u00e1c nh\u1eadn m\u1ed9t s\u1ef1 c\u1ed1 b\u1ea3o m\u1eadt li\u00ean quan \u0111\u1ebfn h\u1ea1 t\u1ea7ng t\u00edch h\u1ee3p, trong \u0111\u00f3 k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 l\u1ea5y OAuth token d\u00f9ng \u0111\u1ec3 k\u1ebft n\u1ed1i v\u1edbi c\u00e1c m\u00f4i tr\u01b0\u1eddng Salesforce c\u1ee7a kh\u00e1ch h\u00e0ng. V\u1ee5 vi\u1ec7c \u0111\u01b0\u1ee3c ch\u00fa \u00fd h\u01a1n khi nh\u00f3m t\u1ed1ng ti\u1ec1n Icarus […]<\/p>\n","protected":false},"author":2,"featured_media":1657,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[217,214,213,88,216,215,218],"class_list":["post-1659","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc","tag-data-breach","tag-icarus","tag-klue","tag-oauth","tag-saas-security","tag-salesforce","tag-token-security"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1659","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1659"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1659\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1657"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1659"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1659"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1659"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}