On June 11, a threat group calling itself Icarus compromised Klue, a Vancouver-based market intelligence platform, and used a legacy credential to harvest OAuth tokens connected to customers’ Salesforce integrations. The fallout hit the cybersecurity industry directly.