Identity security firm Aura confirms the breach was due to a “targeted phone phishing attack” – and the hackers only needed one hour of access.

The infamous hacking group is claiming to have compromised hundreds of companies via their Salesforce instances – here’s what you can do to protect yours.