New threat research: 300% surge in SaaS attacks signals a shift in threat actor targets

Obsidian has released its new 2025 SaaS Security Threat Report that reveals SaaS breaches have surged by a staggering 300% over the past year and that SaaS applications were the attack vector behind the majority of the biggest incidents, including MGM, Microsoft, AT&T, and Okta.

These findings signal a shift among nation-state and criminal threat actors – including groups like Midnight Blizzard,  Scattered Spider, ShinyHunters, and more – who are targeting SaaS platforms as the new “frontline” attack vector as more data shifts to popular SaaS apps like Microsoft Office 365, Google Workspace, ServiceNow, Slack and Okta.

The new report is based on the industry’s largest repository of SaaS-related attack data, including direct involvement in over 150 incident responses alongside leading firms like GuidePoint and Kroll.

You can read the report here.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading