TheRegister's platform is a leading technology news website, offering insights into IT industry news, hardware reviews, and software updates. Through articles, analysis, and opinion pieces, TheRegister offers insights into cybersecurity threats, technology trends, and industry developments. Readers can stay updated with the latest news and analysis from the world of technology and IT business.

The Register

Mandiant released AuraInspector, a free open source tool that helps Salesforce administrators detect and fix misconfigurations in Salesforce Aura (the UI framework for Experience Cloud sites) that could expose sensitive data. The tool automates detection of common access control issues, such as unauthenticated users gaining access to records via the getItems method or GraphQL API abuse. It provides read-only scanning and generates remediation recommendations without modifying Salesforce instances. Despite many customers migrating to Lightning Web Components, Aura remains widely used for legacy functionality, and security researchers continue finding widespread data leaks from misconfigured Salesforce Community and Experience Cloud sites.

Mandiant plugs Salesforce leaks with open source tool