BeyondTrust confirmed that it was impacted by the supply chain incident involving the compromised Salesloft drift application. On August 22, 2025, Salesforce notified BeyondTrust of suspicious activity in which attackers used credentials tied to heading