Salesforce has introduced what it calls Headless 360 at its developer event TDX, which starts today in San Francisco, ...

A pre‑authentication bug in SAML Web SSO, combined with weak access controls and cryptography, allows attackers to escalate privileges and achieve remote code execution.