Salesforce Certified System & Application Architect
CMS Pvt Ltd
Attackers Aren't Breaking In—They're Logging In: Securing Salesforce in 2026
Salesforce is no longer an isolated CRM. It is the highly integrated, connected hub of modern business operations. Consequently, the threat landscape has fundamentally shifted. Attackers are no longer looking for zero-day vulnerabilities in the core platform infrastructure. Instead, they are leveraging compromised credentials, misconfigured API integrations, and over-permissioned third-party Connected Apps. This session dives deep into the modern post-breach reality. Attendees will learn how to identify hidden exposure risks across their integration profiles, implement bulletproof OAuth governance, and deploy clever, low-cost detection mechanisms like database “canaries” to catch attackers before they find your sensitive data.
- OAuth is the New Password: Why securing integrations and Connected Apps is the highest-priority defense vector in 2026.
- The Power of Canaries: How to construct and deploy fake decoy records to immediately detect active data scanning or exfiltration.
- Actionable Governance: Practical steps to eliminate over-permissioned access and automate token-expiration audits.
Malaka Silva is an Associate Architect at CMS, based in Sri Lanka, with over a decade of experience in enterprise cloud applications and integrations. He specializes in designing robust, scalable workflows and identity frameworks, helping development teams balance high-velocity business feature delivery with modern security compliance. Malaka is also an active contributor to local engineering communities, where his focus areas include database performance, platform architecture, and secure automation models.
Before joining CMS, Malaka served as an Associate Director and Solutions Architect at WSO2, where he specialized in enterprise middleware and complex APIs. A Java programmer, Salesforce Certified professional, and ServiceNow professional, he bridges deep infrastructure engineering with modern cloud platform architectures. His work centers on building scalable solutions that let teams deliver business features quickly without compromising enterprise security standards.