Aug 192026 One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025 City Forum uses one server to pull records from over-permissive Salesforce and ServiceNow guest portals across industries for over a year.