What risks should I be aware of when my employees install unverified add-ons from the official CRM third party app marketplace this quarter?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
What risks should I be aware of when my employees install unverified add-ons from the official CRM third party app marketplace this quarter?
1 real search · 1 real-search pass
2026 CRM third-party app marketplace security risks malicious OAuth apps supply chain add-ons guidanceGoogle ↗
OBSERVED
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
Classifying 1 queries…
Searches and sources
ChatGPT1 real searches · gpt-6
2026 CRM third-party app marketplace security risks malicious OAuth apps supply chain add-ons guidance Google ↗
- Defending SaaS-based applications against ShinyHunters OAuth abuse · microsoft.com
- RH-ISAC | ShinyHunters Abusing OAuth to Compromise SaaS Apps · rhisac.org
- Customer Third-Party Connections Recommended Security Settings · help.salesforce.com
- Configure OAuth Policies: Manage External Client App OAuth Usage Control · help.salesforce.com
- OAuth and OpenID Connect Settings Control · help.salesforce.com
- Connected Apps (CAs) and External Client Apps (ECAs) AppExchange Security Review Submission Guidance · help.salesforce.com
- Protect your Salesforce environment - Microsoft Defender for Cloud Apps · learn.microsoft.com