Obsidian Security incidents — Vendor Status Watch

Security Advisory: CloudSEK Disclosure - TeamPCP / Trivy Supply Chain Campaign [resolved]

Fri, 14 Aug 2026 20:09:47 +0000

Security Advisory: CloudSEK Disclosure — TeamPCP / Trivy Supply Chain Campaign Published: August 13, 2026 Status: Resolved — no customer impact Customer action required: None Summary Obsidian Security is aware of the CloudSEK disclosure regarding the TeamPCP supply chain campaign, which targeted CI/CD pipelines and AI infrastructure beginning in March 2026 and named 2,500+ affected companies. Obsidian is listed among them. The data published by CloudSEK corresponds to the original Trivy-based campaign that affected our CI/CD systems in mid-March 2026 — an incident we detected at the time, fully investigated, and remediated. No customer data was exposed at any time. A limited set of Obsidian internal secrets and CI/CD configurations were exposed. The secrets were all unusable in the

[US Region] - Delayed Identity-Centric Alerts [resolved]

Fri, 12 Jun 2026 16:31:11 +0000

This issue is resolved. We have verified that the issue affecting a subset of identity-centric detections and related alert notifications within the Obsidian US environment has been fully mitigated. Alerting is operating as expected, and this incident is now resolved.

[US Region] - Subset of Alerts Delayed [resolved]

Tue, 09 Jun 2026 14:38:01 +0000

This issue is resolved. We have taken mitigating actions to restore processing, and batch (non-real-time) alerts are now processing normally. Alerting workflows impacted by this issue have resumed as expected, and we are no longer seeing ongoing delay related to this event.

[US Region] - Subset of threat detections delayed [resolved]

Wed, 27 May 2026 12:40:10 +0000

We have verified that the issue affecting a subset of threat detections in US region environments has been fully mitigated. Alerting is operating as expected, and this incident is now resolved.

Subset of Detections Delayed [resolved]

Fri, 15 May 2026 15:10:31 +0000

This incident has been resolved. Monitoring has confirmed that service has returned to normal operation, and threat detections are processing as expected.

Subset of detections delayed [resolved]

Fri, 15 May 2026 14:05:39 +0000

A fix to address an issue resulting in detection and alerting delays for a subset of threat detections has been deployed. Telemetry and post fix validation confirm a return to normal service operation.

Not Found ( HTTP-404) Errors when attempting to access Obsidian Environment [resolved]

Wed, 11 Mar 2026 14:05:17 +0000

A fix to address the issue of "Not Found" errors being displayed upon attempt to load Obsidian Environments has been released, and telemetry and post fix validation confirm a return to normal service operation.

Activity timeline delay [resolved]

Wed, 11 Mar 2026 07:51:55 +0000

This incident has been resolved.

Intermittent failures when loading Obsidian admin console [resolved]

Mon, 09 Feb 2026 21:06:09 +0000

We have fully resolved the issue that was impacting the US environment. System performance and operation have returned to normal levels, and all services are functioning as expected. Our team will continue to monitor the environment closely, but no further impact is anticipated at this time. Thank you for your patience while we work to restore normal operation.

Web UI slowness for US region [resolved]

Mon, 09 Feb 2026 19:00:00 +0000

We see US region got UI response slowness. Team identified it related to a backend issue. A fix was applied. The issue is resolved at 11:20AM

Service partially down(threat, activity) for US region [resolved]

Mon, 05 Jan 2026 01:44:20 +0000

After monitoring system performance and fully confirming the previously deployed fix to be effective, we are now marking this incident as resolved. All affected functionality has been fully restored, and customers should no longer encounter "An error has occurred" when loading these modules. Thank you for your patience while we worked through and resolved this incident.

Obsidian Administration UI Access - Cloudflare Outage [resolved]

Fri, 05 Dec 2025 09:07:25 +0000

This incident has been resolved. Our monitoring is no longer showing elevated error rates and all components across the Obsidian platform are fully operational.

Obsidian Administration UI Access - Cloudflare Outage [resolved]

Tue, 18 Nov 2025 12:16:42 +0000

This incident has been resolved. Our monitoring is no longer showing elevated error rates and all components across the Obsidian platform are fully operational.

Obsidian Browser Extension ver. 1.13.x Page Unresponsive Errors [resolved]

Wed, 12 Nov 2025 19:12:11 +0000

This incident has been resolved. We have released a permanent fix in the Obsidian Browser Extension version ver. 1.13.4, which is now rolling out via auto‑update. What to expect: The updated extension will install automatically as it propagates to users. Next steps: If you previously disabled Phishing Detections as a workaround, you may re‑enable it once your environment has received version 1.13.4. Scope: No other Browser Extension capabilities were affected. Support: For help confirming rollout status or re‑enabling Phishing Detections, contact Obsidian Support at support@obsidiansecurity.com or your Technical Account Manager. Thank you for your patience while we worked to resolve this issue.

Errors when authenticating to the Obsidian admin portal [resolved]

Thu, 06 Nov 2025 19:03:14 +0000

This issue has been resolved. A fix addressing the underlying issue was implemented and authentication services have returned to normal operation.

Subset of Salesforce posture rule unexpectedly changed to passing [resolved]

Thu, 28 Aug 2025 16:06:43 +0000

The issue has been resolved and impacted Salesforce posture rules now reflect the correct status. We appreciate your patience and understanding during this time, and if you experience any further issues, please do not hesitate to reach out.