# The security attack that hid inside your observability data

DevFeed: [The security attack that hid inside your observability data](<https://devfeed.tech/articles/the-security-attack-that-hid-inside-your-observability-data-4836.md>)

Original publisher: [Read original article](<https://www.elastic.co/blog/security-attack-hiding-in-observability-data>)

Author: Roberto Arico

Published: 2026-09-03T00:00:00Z

Content type: article

Language: en

Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack](<https://devfeed.tech/sources/elastic-blog-elasticsearch-kibana-and-elk-stack.md>)

Topics: [SIEM, Security, Observability](<https://devfeed.tech/topics/siem-security-observability.md>), [telemetry](<https://devfeed.tech/topics/telemetry.md>), [cpu](<https://devfeed.tech/topics/cpu.md>)

Tags: [cost](<https://devfeed.tech/tags/cost.md>), [cpu](<https://devfeed.tech/tags/cpu.md>), [endpoint-security](<https://devfeed.tech/tags/endpoint-security.md>), [endpoint-security-observability-security-siem-log-analytics](<https://devfeed.tech/tags/endpoint-security-observability-security-siem-log-analytics.md>), [observability](<https://devfeed.tech/tags/observability.md>), [security](<https://devfeed.tech/tags/security.md>), [security-analytics-security-compliance-threat-hunting-tool-consolidation-agentic-ai-alerting](<https://devfeed.tech/tags/security-analytics-security-compliance-threat-hunting-tool-consolidation-agentic-ai-alerting.md>)

## AI overview

The article explains how separating observability and security platforms can conceal threats such as cryptominers, duplicate data costs, and prevent teams from seeing the full operational and security picture.

## Source excerpt

Your ops team sees a CPU spike. Your security team sees nothing. The cryptominer runs for six hours. Avoid duplication of cost and time and see how a unified observability and security platform with grounded AI closes the gap.