September 22, 2022: -Salesforce co-CEO Marc Benioff said the cloud software company has much more to do in cybersecurity after an attack at Uber that includes Salesforce’s Slack chat app.

On Monday, Uber stated that it believed a hacking group dubbed Lapsus$ was behind a cyberattack in the last week and noted that different victims of the group’s attacks this year included Cisco, Nvidia, Okta, and Samsung. Microsoft added that Lapsushad accessed one of its accounts.

The attacker has got a company contractor’s password on the dark web after a malware attack, and the contractor is accepting a two-factor authentication request, Uber said. The attacker downloaded some Slack messages and showed a note to a Slack channel that “many of you saw,” the ride-sharing company stated.

Hackers often use social engineering, exploiting trusted individuals rather than just going after hardware and software.

“There’s no finish line when it is coming to security and social engineering,” Benioff stated during a press conference at Salesforce’s Dreamforce conference in San Francisco on Tuesday. “We’ll need to do things to help our customers is discouraging these issues.”

Salesforce has seen its systems used in the past. In 2007, a hacker reportedly received email addresses stored in Salesforce and used them to go after clients of Automatic Data Processing and other Salesforce customers. And in June, Salesforce’s Heroku unit told a hacker had obtained account passwords and some source code.

“We’ve been through almost every possible situation,” Benioff said. “There’s a lot for us to do in perpetuity, and we’ll keep working on it.”

Most of the firm’s engineering team works on security and trust, said Bret Taylor, Salesforce’s other co-CEO. Taylor reported that confidence was one of Salesforce’s original values when the company was founded in 1999.