Salesforce patched the zero-day flaw exploited in recent Facebook phishing campaign, but Meta continues with the investigations yet.