Incident Watch: Real-Time SaaS Threat Reports & Attack Analysis

Follow the latest SaaS breaches, zero-day vulnerabilities, and threat trends with expert guidance from Obsidian Security.

Incident Watch

ShinyHunters Breach Workday in Latest Salesforce Attack
8/19/2025

Incident Watch

Allianz Life Salesforce Data Breach: Scattered Spider & ShinyHunters Attack
8/13/2025

Incident Watch

143,000 Claude, Copilot, ChatGPT Chats Publicly Accessible. Were You Exposed?
8/8/2025

Incident Watch

UNC6040 Breaches SaaS Apps at Google and Other Major Companies
Sophie Zhu
8/7/2025

Incident Watch

Grok API Key Leak Exposes xAI Models to Major Security Risks
7/23/2025

Incident Watch

ServiceNow Vulnerability Exposes Sensitive Data to Unauthorized Users
7/21/2025

Incident Watch

Malicious Browser Extensions Infect 2.3 Million Users
7/11/2025

Incident Watch

Scattered Spider Now Targeting Airlines and Transportation, FBI Warns of Imminent Data Theft
7/2/2025

Incident Watch

16 Billion Passwords Leaked Online in Record Data Breach
6/23/2025

Incident Watch

UNC6040 Vishing Campaigns Targets Salesforce for Data Theft
6/16/2025

Incident watch

Scattered Spider Targets Airlines & Retail in Social‑Engineering‑Driven Cyberattack
Sophie Zhu
July 29, 2025

Incident watch

APT28 (Fancy Bear) Russian Military Intelligence Targets Western Logistics Supporting Ukraine
Sophie Zhu
May 21, 2025

Incident watch

BlindEagle (APT‑C‑36) Targets Latin American Entities in Spear‑Phishing‑Driven Espionage Campaign
Sophie Zhu
March 11, 2025

Incident watch

Void Arachne (Silver Fox APT) Targets Taiwanese Government & Tech Firms in Spear‑Phishing‑Driven Espionage Campaign
Sophie Zhu
February 27, 2025

Incident watch

APT41 (Barium / Salt Typhoon)Targets Telecom Providers via Kernel‑Level Backdoor Espionage Campaign
Sophie Zhu
January 17, 2025

Incident watch

APT32 (OceanLotus) Targets Dissidents & Corporate Media via Fake‑Site‑Driven Espionage Campaign
Sophie Zhu
September 15, 2024

Incident watch

APT33 (Elfin Team) Targets Aerospace & Energy Firms via Spear‑Phishing‑Driven Espionage Campaign
Sophie Zhu
September 12, 2024

Incident watch

APT29 (Cozy Bear/Midnight Blizzard) Targets Diplomatic IT via Token‑Theft‑Driven Espionage Campaign
Sophie Zhu
January 16, 2024

Incident watch

APT34 (OilRig / Helix Kitten) Targets Middle Eastern Government Email Infrastructure via Power Exchange Server Backdoor
Sophie Zhu
May 25, 2023

Incident watch

UNC2452 Targets Government IT Supply Chain in Supply‑Chain Espionage Campaign
Sophie Zhu
December 12, 2020