News The ‘City-Forum’ Campaign Shows What Weak Guest User Permissions Really Cost by Rebecca Sutton August 21, 2026 by Rebecca Sutton August 21, 2026 A single attacker has spent 17 months scraping Salesforce and ServiceNow customer portals worldwide, not by exploiting a flaw but by using guest user permissions exactly as they were configured. FacebookTwitterLinkedinEmail