---
title: "Threat Intel Content Update: 9/10/2025"
description: Tidal Cyber's threat intelligence content updates for the week of 9/10/2025- SaaS Data Theft Attack Update
---

[Threat Intelligence Content Updates ](https://www.tidalcyber.com/threat-updates)

# [Threat Intel Content Update: 9/10/2025](https://www.tidalcyber.com/threat-updates/threat-intel-content-update-9/10/2025)

 Written by [Tidal Cyber](https://www.tidalcyber.com/threat-updates/author/tidal-cyber) | Sep 10, 2025 6:39:20 PM

#### **SaaS Data Theft Attack Update**

Threat Profiles & Threat Objects

- “Trending & Emerging Threats” weekly update: **SaaS Data Theft Attack Update**
  
    - In our August 28 update, we highlighted a new Campaign object covering “widespread data theft” activity impacting Salesforce integrations with Salesloft Drift AI chat technology. 
    - We updated the [object](https://app.tidalcyber.com/campaigns/393ff99b-4d77-402b-8c6e-f8fc9a747dee?tab=2) following the [release](https://trust.salesloft.com/?uid=Update+on+Mandiant+Drift+and+Salesloft+Application+Investigations) of additional technical details, and are featuring it in this week’s Threat Profile update.
    - Responders [indicated](https://cloud.google.com/blog/topics/threat-intelligence/data-theft-salesforce-instances-via-salesloft-drift) that the scope of the attack was almost certainly wider than initially indicated, impacting a wide range of integrations with the Drift platform, not just the Salesforce one.
- Large-scale supply chain compromise: [New Campaign object](https://app.tidalcyber.com/campaigns/393ff99b-4d77-402b-8c6e-f8fc9a747dee?tab=2) added covering the npm JavaScript package compromises making headlines this week.
  
    - The incident received attention due to its potential scale (in total, the affected packages account for more than two billion downloads per week), although it was relatively quickly identified and contained.

[View full post](https://www.tidalcyber.com/threat-updates/threat-intel-content-update-9/10/2025)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Tidal Cyber"
  },
  "dateModified" : "2025-09-10T18:39:21.101Z",
  "datePublished" : "2025-09-10T18:39:20Z",
  "headline" : "Threat Intel Content Update: 9/10/2025",
  "image" : {
    "@type" : "ImageObject",
    "height" : 440,
    "url" : "https://21164103.fs1.hubspotusercontent-na1.net/hubfs/21164103/Threat%20Intelligence%20Content%20Update%20Social%202025-2.jpg",
    "width" : 900
  },
  "mainEntityOfPage" : "https://www.tidalcyber.com/threat-updates/threat-intel-content-update-9/10/2025",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Threat Intelligence Content Updates"
  }
}
```