Incident Watch: Real-Time SaaS Threat Reports & Attack Analysis

Follow the latest SaaS breaches, zero-day vulnerabilities, and threat trends with expert guidance from Obsidian Security.

Incident Watch

Obsidian Security Customer Alert on Risky AI Assistant Clawdbot

Incident Watch

Obsidian Security Customer Alert on Malicious Chrome Extension

Incident Watch

Obsidian Security Customer Alert on Salesforce-Gainsight Data Breach

Incident Watch

Anthropic AI Used by Nation-State Hackers to Automate and Scale Cyberattacks

Incident Watch

Automaker Giant Stellantis Breached in SaaS Supply Chain Attack

Incident Watch

ShinyHunters Breach Workday in Latest Salesforce Attack

Incident Watch

Allianz Life Salesforce Data Breach: Scattered Spider & ShinyHunters Attack

Incident Watch

143,000 Claude, Copilot, ChatGPT Chats Publicly Accessible. Were You Exposed?

Incident Watch

UNC6040 Breaches SaaS Apps at Google and Other Major Companies

Incident Watch

Grok API Key Leak Exposes xAI Models to Major Security Risks

Incident Watch

ServiceNow Vulnerability Exposes Sensitive Data to Unauthorized Users

Incident Watch

Malicious Browser Extensions Infect 2.3 Million Users

Incident Watch

Scattered Spider Now Targeting Airlines and Transportation, FBI Warns of Imminent Data Theft

Incident Watch

16 Billion Passwords Leaked Online in Record Data Breach

Incident Watch

UNC6040 Vishing Campaigns Targets Salesforce for Data Theft

Incident watch

Scattered Spider Targets Airlines & Retail in Social‑Engineering‑Driven Cyberattack

Incident watch

APT28 (Fancy Bear) Russian Military Intelligence Targets Western Logistics Supporting Ukraine

Incident watch

BlindEagle (APT‑C‑36) Targets Latin American Entities in Spear‑Phishing‑Driven Espionage Campaign

Incident watch

Void Arachne (Silver Fox APT) Targets Taiwanese Government & Tech Firms in Spear‑Phishing‑Driven Espionage Campaign

February 27, 2025

Incident watch

APT41 (Barium / Salt Typhoon)Targets Telecom Providers via Kernel‑Level Backdoor Espionage Campaign

January 17, 2025

Incident watch

APT32 (OceanLotus) Targets Dissidents & Corporate Media via Fake‑Site‑Driven Espionage Campaign

September 15, 2024

Incident watch

APT33 (Elfin Team) Targets Aerospace & Energy Firms via Spear‑Phishing‑Driven Espionage Campaign

September 12, 2024

Incident watch

APT29 (Cozy Bear/Midnight Blizzard) Targets Diplomatic IT via Token‑Theft‑Driven Espionage Campaign

January 16, 2024

Incident watch

APT34 (OilRig / Helix Kitten) Targets Middle Eastern Government Email Infrastructure via Power Exchange Server Backdoor

Incident watch

UNC2452 Targets Government IT Supply Chain in Supply‑Chain Espionage Campaign

December 12, 2020