News Summary

• In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow.
• An unauthenticated outsider now has a route into an internal agent's instructions, and the agent's reply leaves through the same door.
• Securing an inherited agent means understanding its host application at the depth its own admins do.
• The City-Forum campaign, an active worldwide data-theft operation against Salesforce and ServiceNow instances running since March 2025, was found in exactly this territory.