The MFA You Trust Is Lying to You

The latest Sysco and Kodak breach claims should make every Salesforce customer stop pretending this is someone else’s problem. Sysco has now been tied to three separate breach stories. First came the prior data breach that resulted in a class action settlement. Then came a Qilin ransomware claim. Now ShinyHunters is claiming more than 61 million Salesforce records. Kodak appears in the same pattern, with ShinyHunters claiming 2.2 million records and Kodak confirming unauthorized access to some data.

How “ん” And Clever Domain Spoofing Are Bypassing Legacy MFA — And Why Only Token Shuts The Door In the evolving phishing landscape, attackers don’t need high-level exploits—they only need one cunning trick: swap in a lookalike character that fools the human eye. As detailed recently in BleepingComputer, Booking.com users recently fell victim to one such campaign that leveraged the Japanese Hiragana “ん” (Unicode U+3093) to masquerade as a familiar URL path. It’s no text-only illusion; this is phishing with precision.

The Aflac breach last week wasn’t pulled off by elite hackers—it was enabled by the same outdated multi-factor authentication (MFA) most enterprises rely on today.