Salesforce and CrowdStrike partner for AI security with Falcon Shield

As AI agents join the workforce, security teams must understand what they are doing, trace them back to their human creators, and prevent them from becoming overprivileged or compromised. That's why CrowdStrike and Salesforce announced a new strategic partnership to enhance the security of AI agents and applications built on Agentforce and the Salesforce Platform. Through integrations between CrowdStrike Falcon® Shield and Salesforce Security Center, Salesforce admins and security professionals will gain enhanced visibility, compliance support, and protection for critical workflows — simplifying operations and uniting business and security teams on a shared foundation of trust in the agentic AI era. The partnership also enables customers to access Crowdstrike’s AI agentic security analyst, Charlotte AI, through Agentforce for Security and use it to work directly alongside teammates in Slack, flagging potential threats and recommending actions in a conversational manner as any other employee would. By bringing Charlotte AI into Slack through Agentforce, CrowdStrike and Salesforce will empower teams to quickly and efficiently handle security incidents without having to switch applications. “As adversaries increasingly launch identity-based attacks, together with Salesforce, we’re collaborating to extend the power of the agentic Falcon Platform to secure mission-critical applications and AI workflows,” said Daniel Bernard, Chief Business Officer at CrowdStrike. “With Falcon Shield integrated into Salesforce Security Center, business and security teams will gain a shared view of risk and response – protecting mission-critical workflows today and building the foundation for how enterprises will secure AI-powered business in the future.” Salesforce will be at Fal.Con in Las Vegas this week to share more about the partnership. https://sforce.co/3Ic3Lld

Excited about our new Strategic Partnership with CrowdStrike. 🤝 Our partnership enhance the security of AI agents and applications built on Agentforce and the Salesforce Platform. Through integrations between CrowdStrike Falcon® Shield and Salesforce Security Center, Salesforce admins and security professionals will gain enhanced visibility, compliance support, and protection for mission-critical workflows, simplifying operations and uniting business and security teams on a shared foundation of trust in the agentic era. 🏦 The partnership also enables customers to access CrowdStrike’s agentic security analyst, Charlotte AI, through Agentforce for Security and use it to work directly alongside teammates in Slack, flagging potential threats and recommending actions in a conversational manner as any other employee would. Charlotte AI will be available in the Salesforce AppExchange AgentExchange and the Slack Marketplace “A key to unlocking the full potential of agentic AI lies in the ability to secure it,” said Brian Landsman, CEO of AppExchange and Global Partnerships at Salesforce. “Our partnership with CrowdStrike ensures that our customers can build their agentic enterprises on Salesforce while maintaining the highest standards of security and compliance.” https://lnkd.in/etKQk225

Secure your agentic enterprise: 🤝 CrowdStrike partners with Salesforce to secure AI-powered business. #FalconShield integrates with #SalesforceSecurityCenter while #CharlotteAI joins #Agentforce for Security, delivering enhanced protection for mission-critical AI agents and workflows. Key capabilities: ✅ Trace agents to human creators for accountability ✅ Real-time detection of risky behavior & misconfigurations ✅ Automated threat containment via Falcon Fusion ✅ Charlotte AI in Slack for conversational threat investigation ✅ Accelerated incident response without switching applications As adversaries target AI agents with identity-based attacks, this partnership unites business and security teams on a foundation of trust. https://lnkd.in/eCgwcdC8 #Salesforce #Agentforce #AISecurity #FalconShield #Charlotte #Fal.Con25

🎭 𝐒𝐲𝐬𝐭𝐞𝐦𝐬 𝐓𝐡𝐚𝐭 𝐒𝐞𝐜𝐮𝐫𝐞 𝐀𝐥𝐬𝐨 𝐁𝐞𝐭𝐫𝐚𝐲 🔐 Whether it was a banking credential, a misconfigured AI assistant, or a forgotten OAuth scope, each one began as a safeguard, a productivity booster, or a necessary integration. Yet all were ultimately exploited, not because they failed, but because they performed exactly as intended. More and more, the very systems and frameworks built to enforce security and improve efficiency are becoming the same mechanisms attackers use to penetrate them. The boundary between protection and exposure is no longer defined by failure, but by how that system is used. 🧠 Recent incidents such as Salesforce token abuse, AI code reviewers executing unsafe logic, phishing-as-a-service platforms, and breaches through legacy vendor access highlight an unsettling trend. OAuth tokens often retain access long past their operational need. Insider credentials quietly persist after employment ends. AI tools misinterpret code and behave in ways that developers never anticipated. Legacy systems continue to operate in critical environments, often unmonitored and unpatched. This convergence of automation, outdated infrastructure, and unchecked trust is reshaping the limits of cybersecurity oversight. 🛠️ Organizations must begin to treat their architecture as a dynamic, living ecosystem. Every integration, identity, and AI-driven process must have a defined and actively managed lifecycle. AI-assisted systems should operate in sandboxed environments with restricted outbound activity. OAuth permissions must expire predictably and be continuously monitored. Offboarding must be immediate and audit-verified. Vendor access should align with a zero-trust posture, not just rely on contractual terms. Any system capable of acting independently must be assessed as both an operational asset and a potential liability. Security today is not just about adding more controls, but about ensuring existing ones behave as expected, especially when no one is watching. 💬 Have you ever discovered that a trusted integration or AI tool introduced more risk than value? How are you balancing productivity and governance when deploying automated systems across your environment? #securityduality #cybersecurityaiparadox #aiincybersecurity #cybersecurity #cyberriskmanagement

Salesforce and CrowdStrike Unite to Fortify AI Security and Response: In an era where artificial intelligence (AI) applications are rapidly growing, the need for robust security measures has never been more critical. Salesforce and CrowdStrike have announced a strategic partnership aimed at enhancing security for AI-driven business processes, a move that holds promise for small businesses increasingly banking on these technologies. The integration of CrowdStrike’s Falcon Shield with Salesforce’s Security Center and the introduction of Charlotte AI through Agentforce signal a major advance in safeguarding AI agents and applications. This collaboration aims to provide small business owners with enhanced visibility, compliance, and faster incident response for their mission-critical workflows. Daniel Bernard, CrowdStrike’s chief business officer, emphasized the urgency of protecting AI systems, stating, “Adversaries are already targeting AI agents and applications with identity-based attacks. Together with Salesforce, we’re extending the power of the Falcon platform to protect mission-critical workflows and secure the next generation of AI-powered business.” For small business owners, the implications are clear: ensuring their AI applications are secure is no longer optional. The integration enables Salesforce admins to gain a comprehensive view of permissions and actions taken by AI agents, enhancing accountability and governance. Key benefits of this partnership include: * Visibility and Accountability: Small business owners can now trace AI agents back to their human creators, establishing a clear chain of accountability. This governance is essential for compliance and risk management. * Proactive Risk Detection: The collaboration allows for real-time flagging of misconfigurations and unusual activities within Salesforce. This proactive approach can help small businesses identify vulnerabilities before they become serious threats. * Automatic Threat Containment: With Falcon Shield, immediate actions can be taken to block risky access or disable compromised agents directly from the Salesforce Security Center. This level of automation can significantly reduce the time between detecting and responding to threats. * Unified Protection: By combining multiple security offerings, small business owners gain end-to-end control over AI applications, simplifying their security posture. In addition to these features, the integration of Charlotte AI into Slack empowers teams to streamline their incident response processes. Small businesses can create dedicated channels in Slack for cybersecurity incidents, allowing for efficient coordination without toggling between multiple platforms. The natural language capabilities of Charlotte AI facilitate quick messaging about threats and recommended actions, making it easier for teams to communicate effectively. However,… http://dlvr.it/TN9hQd

Salesforce and CrowdStrike Unite to Fortify AI Security and Response: In an era where artificial intelligence (AI) applications are rapidly growing, the need for robust security measures has never been more critical. Salesforce and CrowdStrike have announced a strategic partnership aimed at enhancing security for AI-driven business processes, a move that holds promise for small businesses increasingly banking on these technologies. The integration of CrowdStrike’s Falcon Shield with Salesforce’s Security Center and the introduction of Charlotte AI through Agentforce signal a major advance in safeguarding AI agents and applications. This collaboration aims to provide small business owners with enhanced visibility, compliance, and faster incident response for their mission-critical workflows. Daniel Bernard, CrowdStrike’s chief business officer, emphasized the urgency of protecting AI systems, stating, “Adversaries are already targeting AI agents and applications with identity-based attacks. Together with Salesforce, we’re extending the power of the Falcon platform to protect mission-critical workflows and secure the next generation of AI-powered business.” For small business owners, the implications are clear: ensuring their AI applications are secure is no longer optional. The integration enables Salesforce admins to gain a comprehensive view of permissions and actions taken by AI agents, enhancing accountability and governance. Key benefits of this partnership include: * Visibility and Accountability: Small business owners can now trace AI agents back to their human creators, establishing a clear chain of accountability. This governance is essential for compliance and risk management. * Proactive Risk Detection: The collaboration allows for real-time flagging of misconfigurations and unusual activities within Salesforce. This proactive approach can help small businesses identify vulnerabilities before they become serious threats. * Automatic Threat Containment: With Falcon Shield, immediate actions can be taken to block risky access or disable compromised agents directly from the Salesforce Security Center. This level of automation can significantly reduce the time between detecting and responding to threats. * Unified Protection: By combining multiple security offerings, small business owners gain end-to-end control over AI applications, simplifying their security posture. In addition to these features, the integration of Charlotte AI into Slack empowers teams to streamline their incident response processes. Small businesses can create dedicated channels in Slack for cybersecurity incidents, allowing for efficient coordination without toggling between multiple platforms. The natural language capabilities of Charlotte AI facilitate quick messaging about threats and recommended actions, making it easier for teams to communicate effectively. However,… http://dlvr.it/TN9hQf

Salesforce and CrowdStrike Unite to Fortify AI Security and Response: In an era where artificial intelligence (AI) applications are rapidly growing, the need for robust security measures has never been more critical. Salesforce and CrowdStrike have announced a strategic partnership aimed at enhancing security for AI-driven business processes, a move that holds promise for small businesses increasingly banking on these technologies. The integration of CrowdStrike’s Falcon Shield with Salesforce’s Security Center and the introduction of Charlotte AI through Agentforce signal a major advance in safeguarding AI agents and applications. This collaboration aims to provide small business owners with enhanced visibility, compliance, and faster incident response for their mission-critical workflows. Daniel Bernard, CrowdStrike’s chief business officer, emphasized the urgency of protecting AI systems, stating, “Adversaries are already targeting AI agents and applications with identity-based attacks. Together with Salesforce, we’re extending the power of the Falcon platform to protect mission-critical workflows and secure the next generation of AI-powered business.” For small business owners, the implications are clear: ensuring their AI applications are secure is no longer optional. The integration enables Salesforce admins to gain a comprehensive view of permissions and actions taken by AI agents, enhancing accountability and governance. Key benefits of this partnership include: * Visibility and Accountability: Small business owners can now trace AI agents back to their human creators, establishing a clear chain of accountability. This governance is essential for compliance and risk management. * Proactive Risk Detection: The collaboration allows for real-time flagging of misconfigurations and unusual activities within Salesforce. This proactive approach can help small businesses identify vulnerabilities before they become serious threats. * Automatic Threat Containment: With Falcon Shield, immediate actions can be taken to block risky access or disable compromised agents directly from the Salesforce Security Center. This level of automation can significantly reduce the time between detecting and responding to threats. * Unified Protection: By combining multiple security offerings, small business owners gain end-to-end control over AI applications, simplifying their security posture. In addition to these features, the integration of Charlotte AI into Slack empowers teams to streamline their incident response processes. Small businesses can create dedicated channels in Slack for cybersecurity incidents, allowing for efficient coordination without toggling between multiple platforms. The natural language capabilities of Charlotte AI facilitate quick messaging about threats and recommended actions, making it easier for teams to communicate effectively. However,… http://dlvr.it/TN9hQZ

The recent Salesloft-Drift breach shows how quickly third-party integrations can become high-impact attack vectors. Hundreds of Salesforce environments, including leading security firms, were compromised through stolen OAuth tokens. Key lesson: AI and automation tools expand agility, but also the attack surface. - Maintain a live inventory of integrations - Rotate and revoke credentials on demand - Monitor for anomalous data queries and exports - Run cross-functional incident response drills Supply-chain security is no longer optional, it’s a leadership imperative.

When your AI chatbot becomes the entry point: Lessons from the Salesloft Drift breach Salesloft recently made the critical decision to take its Drift AI chatbot platform offline after a major supply chain attack compromised OAuth tokens across hundreds of organizations. Key Highlights: Threat actors systematically stole authentication tokens linked to Drift-Salesforce integrations, enabling unauthorized access to Salesforce environments. The breach began in early August and led to the theft of sensitive credentials including AWS keys, passwords, Snowflake tokens, and more. In response, Salesloft and Salesforce revoked all affected tokens, removed Drift integrations, and initiated a full investigation with security partners. The impact extended beyond Salesforce, with some Google Workspace integrations also affected, prompting additional token revocations. Why this matters: Third-party SaaS integrations are a critical blind spot. Even trusted apps can introduce vulnerabilities if granted high privileges. OAuth tokens are as powerful as passwords—their compromise can lead to wide-ranging unauthorized access. Rapid remediation—revoking and rotating credentials, disabling integrations—is crucial to contain damage. Takeaways for security leaders: Regularly audit and inventory all third-party integrations with elevated access. Monitor OAuth token activity closely for unusual behavior. Apply the principle of least privilege to integrations. Prepare a clear incident response plan for third-party breaches. https://lnkd.in/gVd_rah7

Building AI-Ready Identity Security AI agents are creating a "hidden identity crisis" by inheriting highly privileged permissions. Discover how Okta Identity Security Posture Management (ISPM) provides the visibility and control needed to manage human, non-human, and AI identities, ensuring your organization is ready to confidently embrace an AI-powered future. Read the full post here: https://bit.ly/4m1CLCK #AI #IdentitySecurity #Cybersecurity #Okta