Incidents

3 ACTIVE

Validated operational events tracked by Watchkeeper

0SEV12SEV21SEV30SEV4
Coverage & Balance3 open · 2028 signals (Last 7d)
Open Incidents · Region
Geographic skew of active incidents
US0
non-US2
global1
Open Incidents · Domain
Which risk domains are active
Corroboration · Triage
Open incidents by external corroboration
Signals · Region
Inflow geo skew · Last 7d
US14
non-US1177
global837
Signals · Category
Inflow by category · Last 7d
Disaster436
Seismic368
Weather360
Cyber268
Travel231
Health130
Environmental58
Financial57
DomainWeatherSeismicDisasterCyberHealthInfrastructureFinancialEnvironmentalGeopoliticalGeneral
StatusActiveDETECTEDDECLAREDOPENVALIDATEDESCALATEDDE-ESCALATEDRESOLVINGCLOSEDREOPENED
CorroborationAllCorroboratedSingle sourceUncorroborated

Closed Incidents31

SEV3CLOSEDCyber✓ Corroborated · 5 sources5d ago

Critical Cyber Advisories: ICS Vulnerability and Russian State Phishing Campaign — Denver

Two concurrent Severity-10 cyber alerts have been flagged for Denver: a critical vulnerability in MZ Automation's libIEC61850 library (commonly used in industrial and facility cont...

2 eventsDeclared Jul 27, 03:30 PM UTC
SEV3CLOSEDCyber✓ Corroborated · 5 sources8d ago

Russian State-Sponsored Phishing Campaign Targeting Zimbra Collaboration Suite — Denver Operations Footprint

Russian state-supported cyber actors are conducting an active phishing campaign targeting users of Zimbra Collaboration Suite, a widely deployed email and collaboration platform us...

8 eventsDeclared Jul 24, 08:00 PM UTC
SEV3CLOSEDCyber✓ Corroborated · 5 sources10d ago

Qilin Ransomware Exploiting Critical Palo Alto VPN Flaw — Contact-Center Operations at Risk

Qilin ransomware actors are actively exploiting a critical vulnerability in Palo Alto Networks VPN infrastructure to breach corporate networks, with 8 corroborating articles and a ...

36 eventsDeclared Jul 22, 01:00 PM UTC
SEV3CLOSEDCyber✓ Corroborated · 5 sources12d ago

HOLLOWGRAPH Espionage Campaign Exploits Microsoft 365 Calendars — Dallas-Fort Worth Contact-Center and Knowledge-Worker Operations

The HOLLOWGRAPH campaign is actively abusing Microsoft 365 calendar sharing features as covert communication channels, enabling threat actors to exfiltrate data and maintain persis...

Declared Jul 20, 10:00 PM UTC
SEV2CLOSEDCyberONGOING✓ Corroborated · 5 sources18d ago

Russian State-Sponsored Router Targeting Advisory — Des Moines Operations Footprint at Risk

A Sev-10 sentinel alert flags active Russian state-sponsored targeting of router infrastructure in the Des Moines area, mirroring the campaign pattern already declared for Oklahoma...

Des Moines, US, US6 eventsDeclared Jul 14, 03:00 PM UTC
SEV2CLOSEDCyberONGOING✓ Corroborated · 5 sources18d ago

Russian State-Sponsored Cyber Campaign Targeting Router Infrastructure — Oklahoma Operations Footprint at Risk

Finnish intelligence agency Supo and aligned advisories are warning organizations of an active Russian state-sponsored cyber espionage campaign exploiting poor router hygiene to ga...

Oklahoma, US, USDeclared Jul 14, 02:30 AM UTC
SEV2CLOSEDCyber✓ Corroborated · 5 sources18d ago

Critical CVE Alerts: Labcenter Proteus 9 and Digi International PortServer Vulnerabilities — Denver, CO

Two Severity-10 sentinel alerts have fired in Denver flagging critical vulnerabilities in Labcenter Proteus 9 (EDA/PCB design software) and Digi International PortServer TS / Digi ...

Denver, US, US2 eventsDeclared Jul 14, 01:01 AM UTC
SEV2CLOSEDCyber✓ Corroborated · 4 sources18d ago

Critical CVE Advisories: Labcenter Proteus 9 and Digi International PortServer — Dallas-Fort Worth Operations Footprint at Risk

Two severity-10 cyber advisories have been flagged for the Dallas-Fort Worth metro, targeting Labcenter Proteus 9 (EDA/design software) and Digi International PortServer TS/One SP ...

Dallas-Fort Worth, US, US2 eventsDeclared Jul 14, 01:01 AM UTC
SEV2CLOSEDCyber✓ Corroborated · 5 sources19d ago

Hitachi Energy e-mesh EMS Cyber Incident — Denver, CO — Operations Footprint at Risk

A Severity 10 sentinel alert has flagged a cyber incident involving Hitachi Energy's e-mesh Energy Management System in Denver, a metro with over 360,000 contact-center and knowled...

Denver, US, US2 eventsDeclared Jul 13, 05:00 PM UTC
SEV3CLOSEDCyber✓ Corroborated · 3 sources20d ago

Critical ICS/SCADA Vulnerabilities Flagged in Oklahoma City — Operations Footprint at Risk

Sentinel has flagged two severity-10 cyber alerts in Oklahoma City: a critical vulnerability in the Hydro-Québec Le Circuit Électrique EV charging station backend and a separate cr...

Oklahoma, US, US2 eventsDeclared Jul 12, 04:31 AM UTC
SEV3CLOSEDCyber✓ Corroborated · 4 sources20d ago

Critical ICS/SCADA Vulnerabilities Flagged in Denver — Operations Footprint at Risk

Two severity-10 sentinel alerts have fired for critical vulnerabilities in Hitachi Energy e-mesh EMS and OpenPLC v3 affecting the Denver metro area, which hosts an exceptionally la...

Denver, US, US2 eventsDeclared Jul 11, 10:30 PM UTC
SEV3CLOSEDCyber✓ Corroborated · 5 sources20d ago

Critical ICS/SCADA Vulnerabilities Flagged in Dallas-Fort Worth — Operations Footprint at Risk

Two Severity-10 cyber advisories have been triggered in the Dallas-Fort Worth metro, flagging critical vulnerabilities in Hitachi Energy e-mesh EMS and OpenPLC v3 — both industrial...

Dallas-Fort Worth, US, US2 eventsDeclared Jul 11, 10:31 PM UTC
SEV3CLOSEDCyber✓ Corroborated · 3 sources20d ago

Critical ICS/SCADA Vulnerabilities Flagged in Des Moines — Operations Footprint at Risk

Two Severity-10 cybersecurity alerts have been triggered in Des Moines, Iowa, flagging critical vulnerabilities in Hitachi Energy e-mesh EMS and OpenPLC v3 — both industrial contro...

Des Moines, US, US2 eventsDeclared Jul 11, 10:30 PM UTC
SEV3CLOSEDCyber✓ Corroborated · 3 sources21d ago

Critical ICS/SCADA Vulnerabilities Flagged in Colorado Springs — Operations Footprint at Risk

Two severity-10 CVE alerts have been triggered for Labcenter Proteus 9 and OpenPLC v3 in Colorado Springs, both classified as critical ICS/SCADA vulnerabilities. Colorado Springs h...

Colorado Springs, US, US2 eventsDeclared Jul 11, 05:00 PM UTC
SEV3CLOSEDCyber✓ Corroborated · 5 sources21d ago

Critical ICS/SCADA Vulnerability Flagged in Omaha — Contact-Center and Knowledge-Worker Operations Footprint at Risk

A Sev 10 sentinel alert flags a critical vulnerability in Hitachi Energy PROMOD V, an ICS/SCADA system with energy-sector relevance, centered on Omaha, Nebraska. With approximately...

Omaha, US, USDeclared Jul 11, 02:31 AM UTC
SEV3CLOSEDCyber✓ Corroborated · 5 sources22d ago

Critical ICS/SCADA Vulnerability Flagged in Tulsa — Contact-Center and Knowledge-Worker Operations Footprint at Risk

A severity-10 sentinel alert flags a critical vulnerability in Hitachi Energy's e-mesh Energy Management System (EMS) affecting Tulsa, coinciding with news of a newly identified mu...

Tulsa, US, USDeclared Jul 10, 08:30 PM UTC
SEV3CLOSEDCyber✓ Corroborated · 5 sources22d ago

Critical ICS/SCADA Vulnerabilities Flagged in Colorado Springs — Contact-Center and Knowledge-Worker Operations Footprint at Risk

A severity-10 sentinel alert flags critical vulnerabilities in Digi International PortServer TS and Digi One SP IA serial-to-network device servers in Colorado Springs — hardware c...

Colorado Springs, US, USDeclared Jul 10, 12:30 AM UTC
SEV3CLOSEDCyber✓ Corroborated · 4 sources22d ago

Critical ICS/SCADA Vulnerabilities Flagged in Des Moines — Contact-Center and Knowledge-Worker Operations Footprint at Risk

Two severity-10 advisories have been flagged for Des Moines targeting OpenPLC v3 and Digi International PortServer/One SP IA — industrial control and serial-device-server products ...

Des Moines, US, US2 eventsDeclared Jul 10, 12:00 AM UTC
SEV3CLOSEDCyber✓ Corroborated · 5 sources22d ago

Critical ICS/SCADA Vulnerabilities Flagged in Dallas-Fort Worth — Contact-Center and Knowledge-Worker Operations Footprint at Risk

Two Severity-10 Sentinel signals have flagged critical vulnerabilities in OpenPLC v3 and Digi International PortServer TS/Digi One SP IA — industrial control and serial-device-serv...

Dallas-Fort Worth, US, US2 eventsDeclared Jul 10, 12:00 AM UTC
SEV3CLOSEDCyber✓ Corroborated · 5 sources22d ago

Critical ICS/SCADA Vulnerabilities Flagged in Denver — Contact-Center and Knowledge-Worker Operations Footprint at Risk

Two severity-10 sentinel alerts have triggered in Denver targeting Hitachi Energy e-mesh EMS and OpenPLC v3 — industrial control system and programmable logic controller platforms ...

Denver, US, US2 eventsDeclared Jul 9, 11:30 PM UTC
SEV3CLOSEDCyber✓ Corroborated · 5 sources23d ago

Claimed Accenture Breach Exposes Source Code, SSH Keys, and Azure Tokens — Contact-Center Operations Footprint at Risk

A hacker is claiming to have breached Accenture, allegedly exfiltrating source code, SSH keys, and Azure authentication tokens. Accenture is a major managed-services and outsourcin...

Denver, US, USDeclared Jul 9, 02:00 AM UTC
SEV3CLOSEDCyber✓ Corroborated · 4 sources27d ago

Critical Cyber Vulnerabilities: XZ Utils and StoneFly Storage Concentrator — Colorado Springs

Two severity-10 cyber alerts have been flagged for Colorado Springs, covering the XZ Utils supply-chain vulnerability (affecting B&R Products) and a StoneFly Storage Concentrator f...

Colorado Springs, US, US2 eventsDeclared Jul 5, 09:00 AM UTC
SEV3CLOSEDCyber✓ Corroborated · 3 sources27d ago

Critical Cyber Alerts: StoneFly Storage Concentrator and XZ Utils Vulnerabilities Detected in Denver

Two Severity-10 cyber alerts have been triggered in Denver flagging critical vulnerabilities in StoneFly Storage Concentrator and XZ Utils (impacting Backup & Recovery products). D...

Denver, US, US2 eventsDeclared Jul 5, 09:00 AM UTC
SEV2CLOSEDCyber✓ Corroborated · 4 sources31d ago

Critical Cyber Alerts: StoneFly Storage and FUXA SCADA/HMI Vulnerabilities Detected in Des Moines

Two simultaneous Severity 10 sentinel alerts have fired in Des Moines, targeting StoneFly Storage Concentrator and Frangoteam FUXA SCADA/HMI systems — both classes of infrastructur...

Des Moines, US, US2 eventsDeclared Jul 1, 08:00 PM UTC
SEV2CLOSEDCyber✓ Corroborated · 3 sources31d ago

Critical Cyber Alerts: StoneFly Storage Concentrator and FUXA SCADA/HMI Vulnerabilities — Dallas-Fort Worth Operations Hub

Two Sev-10 sentinel alerts have fired in Dallas-Fort Worth targeting StoneFly Storage Concentrator and Frangoteam FUXA SCADA/HMI systems — both carrying maximum severity scores and...

Dallas-Fort Worth, US, US2 eventsDeclared Jul 1, 08:00 PM UTC
Page 1 of 2Older