Attackers Aren’t Breaking In – They’re Logging In: Securing Salesforce in 2026
“As Salesforce becomes the heart of connected business operations, security goes beyond protecting the platform itself. Discover how to identify hidden integration risks, strengthen access controls, and detect suspicious activity before attackers reach your sensitive data.”
SRI LANKA DREAMIN’ 2026 · SPEAKERS
Malaka Silva
Salesforce Certified System & Application Architect
CMS Pvt Ltd
About the Speaker
“Malaka Silva is an Associate Architect based in Sri Lanka, specializing in enterprise cloud applications and integrations. With extensive experience designing robust, scalable workflows and identity frameworks, Malaka helps development teams bridge the gap between high-velocity business feature delivery and modern security compliance. He is actively involved in local engineering communities, focusing on database performance, platform architecture, and secure automation models.
Malaka Silva is an Associate Architect at CMS with over a decade of enterprise integration experience. He previously served as an Associate Director and Solutions Architect at WSO2, specializing in enterprise middleware and complex APIs. As a Java Programmer, Salesforce Certified professional and ServiceNow professional, Malaka bridges the gap between deep infrastructure engineering and modern cloud platform architectures. His work focuses on building robust, scalable solutions, helping development teams design high-velocity business features without compromising on enterprise security compliance.”
About This Session
Salesforce is no longer an isolated CRM. It is the highly integrated, connected hub of modern business operations. Consequently, the threat landscape has fundamentally shifted. Attackers are no longer looking for zero-day vulnerabilities in the core platform infrastructure. Instead, they are leveraging compromised credentials, misconfigured API integrations, and over-permissioned third-party Connected Apps. This session dives deep into the modern post-breach reality. Attendees will learn how to identify hidden exposure risks across their integration profiles, implement bulletproof OAuth governance, and deploy clever, low-cost detection mechanisms like database “canaries” to catch attackers before they find your sensitive data.
Key Takeaways
- OAuth is the New Password: Why securing integrations and Connected Apps is the highest-priority defense vector in 2026.
- The Power of Canaries: How to construct and deploy fake decoy records to immediately detect active data scanning or exfiltration.
- Actionable Governance: Practical steps to eliminate over-permissioned access and automate token-expiration audits.
“As Salesforce becomes the heart of connected business operations, security goes beyond protecting the platform itself. Discover how to identify hidden integration risks, strengthen access controls, and detect suspicious activity before attackers reach your sensitive data.”
SRI LANKA DREAMIN’ 2026 · SPEAKERS
Malaka Silva
Salesforce Certified System & Application Architect
CMS Pvt Ltd
About the Speaker
“Malaka Silva is an Associate Architect based in Sri Lanka, specializing in enterprise cloud applications and integrations. With extensive experience designing robust, scalable workflows and identity frameworks, Malaka helps development teams bridge the gap between high-velocity business feature delivery and modern security compliance. He is actively involved in local engineering communities, focusing on database performance, platform architecture, and secure automation models.
Malaka Silva is an Associate Architect at CMS with over a decade of enterprise integration experience. He previously served as an Associate Director and Solutions Architect at WSO2, specializing in enterprise middleware and complex APIs. As a Java Programmer, Salesforce Certified professional and ServiceNow professional, Malaka bridges the gap between deep infrastructure engineering and modern cloud platform architectures. His work focuses on building robust, scalable solutions, helping development teams design high-velocity business features without compromising on enterprise security compliance.”
About This Session
Salesforce is no longer an isolated CRM. It is the highly integrated, connected hub of modern business operations. Consequently, the threat landscape has fundamentally shifted. Attackers are no longer looking for zero-day vulnerabilities in the core platform infrastructure. Instead, they are leveraging compromised credentials, misconfigured API integrations, and over-permissioned third-party Connected Apps. This session dives deep into the modern post-breach reality. Attendees will learn how to identify hidden exposure risks across their integration profiles, implement bulletproof OAuth governance, and deploy clever, low-cost detection mechanisms like database “canaries” to catch attackers before they find your sensitive data.
Key Takeaways
- OAuth is the New Password: Why securing integrations and Connected Apps is the highest-priority defense vector in 2026.
- The Power of Canaries: How to construct and deploy fake decoy records to immediately detect active data scanning or exfiltration.
- Actionable Governance: Practical steps to eliminate over-permissioned access and automate token-expiration audits.
“As Salesforce becomes the heart of connected business operations, security goes beyond protecting the platform itself. Discover how to identify hidden integration risks, strengthen access controls, and detect suspicious activity before attackers reach your sensitive data.”
SRI LANKA DREAMIN’ 2026 · SPEAKERS
Malaka Silva
Salesforce Certified System & Application Architect
CMS Pvt Ltd
About the Speaker
“Malaka Silva is an Associate Architect based in Sri Lanka, specializing in enterprise cloud applications and integrations. With extensive experience designing robust, scalable workflows and identity frameworks, Malaka helps development teams bridge the gap between high-velocity business feature delivery and modern security compliance. He is actively involved in local engineering communities, focusing on database performance, platform architecture, and secure automation models.
Malaka Silva is an Associate Architect at CMS with over a decade of enterprise integration experience. He previously served as an Associate Director and Solutions Architect at WSO2, specializing in enterprise middleware and complex APIs. As a Java Programmer, Salesforce Certified professional and ServiceNow professional, Malaka bridges the gap between deep infrastructure engineering and modern cloud platform architectures. His work focuses on building robust, scalable solutions, helping development teams design high-velocity business features without compromising on enterprise security compliance.”