AI Security Digest
Aggregated ecosystem risk analysis
Vendor Watchlist
Tracking 0 critical integrations
Threat Stream Feed
Real-time security logs and system alerts
CircleCI - Delays for gen2 dedicated IP range jobs
Oct 28, 18:51 UTC Identified - We’ve identified the cause as limited compute availability from our cloud provider, and we are working to free up additional capacity for these jobs to restore normal start times. We'll provide another update again shortly. Oct 28, 18:15 UTC Investigating - We are investigating delays in starting docker gen2 jobs that use dedicated IP ranges. Jobs are currently delayed by about 10 minutes.No other resource classes are impacted at this time. We will continue to p...
Optimizely - Content Graph Performance Degredation
Oct 28, 17:27 UTC Monitoring - Content Graph experienced http 500 and 404 errors, which we have remediated. We are continuing to monitor the health of the service closely.
CVE Intel update - The open-source CVE triage tool.
Last week I posted CVE Intel here and got really good advice. Thank you all. Here's what's new since then. (original post: https://www.reddit.com/r/cybersecurity/comments/1x8v176/opensource_cve_triage_in_one_place_kev_epss_nvd/) Quick what: CVE Intel is an open-source tool that pulls CVE data from NVD, CISA KEV, EPSS, OSV and public exploit sources into one place. It runs as a desktop app, CLI, RE...
Datadog - Metrics query are disrupted
Oct 28, 12:56 EDT Update - We are investigating the issue. Oct 28, 12:40 EDT Update - We are investigating the issue. Oct 28, 12:10 EDT Investigating - We are investigating metrics issues. As a result, some users might not be able to load dashboard or query metrics.Please note that data processing and alerts are not affected by this incident.
Supabase - Delayed Log Delivery from 14:10 - 15:30 UTC
Status: MonitoringBetween 14:10 - 15:30 UTC we have experienced an issue in delivering logs, leading to a delay of about 7–8 minutes. Most affected events have now been recovered - a small subset of events is still being re-inserted and we will confirm once completed.Affected components Logging & Observability (Degraded performance)
Tailscale Releases Emergency Fix for “Tailworm” SSH Flaws
Tailscale released version 1.104.4 after researchers demonstrated privilege-escalation vulnerabilities in Tailscale SSH. An attacker with access to an already-authorized device could potentially gain elevated privileges on reachable systems. A compromised machine could become a stepping stone into other servers permitted by SSH policy. This is not an unauthenticated Internet-wide worm. Updat...
Rippling - QuickBooks data import delayed for some customers
Oct 28, 15:57 UTC Investigating - We are experiencing delays importing data from QuickBooks for some customers
GitHub - Disruption with some Copilot services
Oct 28, 14:55 UTC Update - We are experiencing degraded availability for the GPT-5.3-Codex, GPT-5.6 Luna, GPT-6.1 Sol, GPT-5.6 Terra, GPT-6 Luna, and MAI Code 1.1 Flash models in Copilot products and IDE surfaces. We have identified the root cause and working to apply a mitigation. While we work to resolve the issue we recommend choosing another model to continue using Copilot. Oct 28, 14:33 UTC Update - We are experiencing degraded availability for the GPT-5.3-Codex, GPT-5.6 Luna, GPT-6.1 So...
Zoom - Service Degradation Affecting the Evaluations Acknowledge Button in Zoom Quality Management in the US Region
Oct 28, 07:31 PDT Identified - We have successfully identified the root cause of the missing evaluations acknowledge button in Zoom Quality Management reports in the US region.Our team is actively working on a resolution, and we will keep you informed with timely updates as progress is made. Thank you for your patience.
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026-104351 (CVSS score: 9.9) - A code injection vulnerability that could lead to arbitrary code execution.
Heroku - Heroku Feature Degradation
Node.js builds are currently experiencing elevated error rates due to issues with an upstream dependency.
Xero - Global: Xero - customers are experiencing issues across Xero
Oct 28, 09:58 UTC Monitoring - Our team has implemented a fix and we are currently monitoring the results. Oct 28, 09:33 UTC Identified - We're aware that customers are experiencing errors across Xero after logging in. We have identified the cause of the issue and are implementing a fix. This is our top priority and we will update you as soon as we can.
New Relic - NGEP API internal JP down
Oct 28, 09:42 UTC Resolved - EndImpact triggered Oct 28, 09:35 UTC Update - We are investigating an issue in the JP region affecting the Next Gen Entity Platform (NGEP) where some customers may be unable to view or manage entities. Our engineering teams are engaged and are actively working to resolve the issue. Oct 28, 09:33 UTC Investigating - We are investigating an issue in the JP region affecting the Next Gen Entity Platform (NGEP) where some customers may be unable to view or manage en...
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
submitted by /u/One_Paint8721 [link] [comments]
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after the model was prompted, not seen in any real attack, and Anthropic reported every flaw to the vendor first, so all of them are already patched. One proof of
Rippling - Rippling AI is down
Oct 28, 06:55 UTC Resolved - Rippling AI is fully recovered. Oct 28, 06:50 UTC Monitoring - We deployed a fix and the system has started to recover. Full recovery is rolling out. Oct 28, 06:44 UTC Identified - Rippling AI is not responding to user queries. We identified the root cause and are remediating the problem.
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background process carries out with root privileges. To use them, an attacker must
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-111497 (CVSS score: 9.2) - An unchecked return value vulnerability in
Amplitude - Planned Data Processing Maintenance - US Data Center
Oct 27, 16:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 22, 16:43 PDT Scheduled - From 23:00 Oct 27 to 01:00 Oct 28 UTC, we will be performing maintenance on components of the core ingestion infrastructure in our US data center.During this time, customers may see data processing delays. No data loss is expected during the maintenance.The EU data center won't be affected.
DigitalOcean - Kubernetes Cluster Management Operations
Oct 27, 22:14 UTC Investigating - Our Engineering team is currently investigating an issue affecting Managed Kubernetes cluster operations.During this time, Customers may experience delays or failures when attempting to create, delete, scale, or upgrade clusters, as well as with other management tasks.Existing workloads running on Managed Kubernetes are not affected and will continue to operate normally.Our Engineering team is actively investigating and treating this with the highest priority. ...
ActiveCampaign - Delayed Processing for Imports, Exports, Bulk Actions, and Campaign sending.
Oct 27, 13:54 CDT Resolved - This incident has been resolved. Oct 27, 13:34 CDT Update - We are continuing to monitor for any further issues. Oct 27, 13:32 CDT Monitoring - Delays should be resolved. Engineers are activity monitoring. Oct 27, 13:20 CDT Update - We are continuing to investigate this issue. Oct 27, 13:19 CDT Investigating - Some customers may experience delays with imports, exports, bulk actions, and campaign sending.
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
CISA has added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities catalog. Federal civilian agencies have been directed to remediate the vulnerabilities by October 29. There is an important correction to earlier reporting. Palo Alto Networks Unit 42 retracted its claim that PHP2Shell caused a European government agency compromise. Researchers confirmed that an attack...
Optimizely - Asset uploads failing in Optimizely CMP and DAM
Oct 27, 15:51 UTC Investigating - We're aware of an issue where uploads are failing in Optimizely Content Marketing Platform (CMP) and Digital Asset Management (DAM). Users trying to upload assets may see an "Upload Error" message, and the upload won't finish.Our Engineering team is investigating right now and is working to find the cause and restore normal upload behavior as quickly as possible.We'll post more details on the investigation soon. We apologize for the disruption and thank you for...
GCP - RESOLVED: Multiple services were experiencing issues in the europe-west2 region.
Incident began at 2026-10-19 23:00 and ended at 2026-10-20 05:10 (all times are US/Pacific).Incident Report Summary On Monday, 19 Oct 2026 (Tuesday, 20 Oct BST), a data center facility that hosts europe-west2-b, experienced an external electrical power disruption. This resulted in service unavailability for workloads located in this zone. As traffic was redirected to alternative cloud regions or unaffected zones within europe-west2 cloud region, these workloads experienced transient latency and...
Akamai - Perfromance Degradation for Customers in Mumbai and Chennai
Oct 27, 13:09 UTC Investigating - On October 27, 2026, between 08:05 UTC and 10:45 UTC customers using services in Mumbai and Chennai may have experienced performance degradation. This occurred due to packet loss within an upstream provider’s network. As of 10:45 UTC the loss has subsided, and we are no longer seeing degraded performance in the affected regions. We have been monitoring for recurrence, and will continue to do so for the next few hours.If you have questions or are still experienc...
RLSA-2026:89732: Grafana Labs Vulnerability
Important: grafana security update
Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perform arbitrary operations (CVE-2026-16438), resulting in information disclosure, tampering with, destruction, or deletion of information, and a denial-of-service (DoS) condition of the system. The foll...
EPICS Base
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code. The following versions of EPICS Base are affected: EPICS Base release <=7.0.10 (CVE-2026-114595, CVE-2026-114596, CVE-2026-114597, CVE-2026-114598) CVSS Vendor Equipment v3...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-111497 Google Brotli Unchecked Return Value Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and p...
Akamai - Enterprise Application Access (EAA) Connector Issues
Oct 27, 09:58 UTC Investigating - We are investigating an issue with Enterprise Application Access that is affecting a subset of Unified EAA Connectors. This issue began on October 27, 2026, at approximately 01:25 UTC. We are working on implementing the fix for the issue and will provide another update within the next 120 minutes. We will soon be posting more details for customers and partners with a valid Control Center login at https://community.akamai.com/customers/s/feed/0D5a700001bU4YFCA0....
OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections
OpenAI's compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model's hidden reasoning out in plain text, security firm Xint has shown. OpenAI's reasoning models work through a problem before answering, and the service normally returns only the raw reasoning as an encrypted item the user cannot read. The method got past
GitHub - Elevated 404s for GitHub App s2s tokens in git/API
Oct 27, 08:00 UTC Resolved - Between 0655 and 0801 UTC on 10/27, customers experienced increased failure rates for API and git requests authenticated with server-to-server tokens for GitHub Apps (excluding Actions tokens). During this window, authenticated git operations mistakenly returned 404 for 1.24% (2.6x) of requests on average and 2.49% (5.3x) at peak.These failures were caused by a scheduled maintenance event where GitHub migrated 7 tables between two MySQL clusters in our IAD and Azure...
Netlify - Elevated Build Errors and Agent Runner failures
Oct 27, 07:48 UTC Investigating - We are investigating elevated build failures and Agent Runner failures.
[CISA KEV] CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
Product: Commerce and Magento by Adobe Description: Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Amplitude - Data Ingestion Delays
Oct 26, 16:52 PDT Investigating - We are currently investigating an issue causing delays in data ingestion. Some customers may experience delays in their events appearing in Amplitude.Our Engineering team is actively investigating the issue and working to restore normal ingestion.We apologize for the inconvenience and will provide updates as more information becomes available.
Xero - Global: Xero - some customers may be experiencing intermittent errors in Xero.
Oct 26, 23:26 UTC Monitoring - Our team has implemented a fix and we are currently monitoring the results. Oct 26, 23:08 UTC Identified - We're aware some customers are experiencing some intermittent errors in Xero. We've identified the cause of this issue and are taking action to correct it. We apologise for any inconvenience this is causing.
LaunchDarkly - delayed event processing
Oct 26, 13:52 PDT Resolved - A scaling inflection point in our realtime event warehouse led to a delay for some event ingestion. The engineering team has remediated the problem and all events should be caught up.Some customers may have seen delays in experiments and in guarded release processing.This is now resolved and the team will carefully monitor.
GitHub - Incident with Actions, Issues, API Requests and Pull Requests
Oct 26, 18:57 UTC Resolved - This incident has been resolved. Thank you for your patience and understanding as we addressed this issue. A detailed root cause analysis will be shared as soon as it is available. Oct 26, 18:54 UTC Update - We saw elevated latency affecting REST API requests, including Checks, and some Actions, Issues, Pull Requests, and GraphQL functionality. Some requests may have been slow or timed out, and notifications were delayed from 17:59 UTC - 18:40 UTC.We mitigated the...
Datadog - Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder
Oct 26, 13:40 EDT Monitoring - We have deployed a fix and we are monitoring the results. We will provide another update once the issue is fully resolved. Oct 26, 13:31 EDT Update - We have identified the underlying issue and are working on a fix. Oct 26, 13:30 EDT Identified - We have identified the underlying issue and are working on a fix. Oct 26, 13:26 EDT Investigating - We are currently investigating an issue affecting Workflow Automation, App Builder, Bits Code, and Agent Builder in...
Netlify - Delays in build logs appearing in the UI
Oct 26, 16:05 UTC Investigating - We have identified an ongoing issue with an upstream service provider that may be contributing to delays in build logs appearing in the Netlify UI. We are in contact with the provider and are continuing to monitor the situation. We will provide further updates as more information becomes available.
Segment - Segment event delivery issues
Oct 26, 06:38 PDT Update - We are continuing to investigate this issue. Oct 26, 06:35 PDT Investigating - We have identified that a small no of event delivery is failing. We are currently investigating the issue.
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 sign-in events across
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an analysis by cloud security company Wiz. A GitHub safeguard that pauses
Amplitude - Scheduled Infrastructure Maintenance - US Data Center
Oct 25, 21:33 PDT Completed - Maintenance has been completed. All affected services are operating normally. Oct 25, 20:45 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 25, 20:34 PDT Scheduled - We will be performing infrastructure maintenance in our US data center during this window. Some features may experience brief interruptions or intermittent errors. We will provide an update when maintenance is complete.
Plaid - Service Disruption Impacting Wells Fargo connections
Status: InvestigatingWells Fargo is currently experiencing downtime impacting all channels and data recipients. Item adds and API calls through Plaid are impacted. We will provide an update when Wells Fargo has resolved the issue.Affected components Dashboard (Partial outage) API - Production (Partial outage)
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
submitted by /u/One_Paint8721 [link] [comments]
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network's access rules permit to connect to the target. The findings were
PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity
In an update, Palo Alto Networks Unit 42 said it's retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploitation of the PHP2Shell flaws. "What researchers saw was an attack against a European government agency executed in the context of a vulnerable PHP application," a spokesperson for the company told The Hacker News via
Akamai - Edge Delivery issues between Indonesia and Singapore
Oct 25, 13:44 UTC Investigating - We are investigating an emerging issue with Edge delivery related to performance degradation and timeouts between Indonesia and Singapore. We are actively investigating the issue and will provide another update within the next 60 minutes. We will soon be posting more details for customers and partners with a valid Control Center login at https://community.akamai.com/customers/s/group/0F90f000000DFgx/service-incident-notifications. If you have questions or are e...
Zoom - Zoom Pardot Integration - Hotfix: October 26, 2026
THIS IS A SCHEDULED EVENT Oct 25, 06:00 PDT - Oct 27, 18:00 PDT Oct 24, 16:22 PDT Scheduled - A hotfix will be going out AM PST on October 26, 2026 to meet Salesforce-Pardot security requirements. Customers utilizing the Pardot Integration will need to re-sync. For more information, see https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0089521
MAL-2026-18266: Redis Labs Vulnerability
Malicious code in redis-dumper (npm)
Monday.com - Scheduled Maintenance Across All Regions
THIS IS A SCHEDULED EVENT Oct 25, 07:00 - 09:00 UTC Oct 22, 20:11 UTC Scheduled - On Sunday, October 25th at 07:00 UTC, we will be performing scheduled maintenance on our platform infrastructure across all regions This maintenance is expected to last approximately 2 hours.During this time, the monday.com platform may experience degraded performance. Thank you for your understanding.
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models. "Based on the current state of alignment research, monitoring systems, and the security of internet infrastructure, we believe the responsible approach is to conduct frontier model training with no
Amplitude - Delayed/Blocked Event Delivery to Amazon Kinesis Destination
Oct 24, 09:58 PDT Investigating - We are currently investigating an issue affecting event delivery to Amazon Kinesis destinations. Some customers may experience delays or failures in event delivery.Our Engineering team is actively investigating the cause and working to restore normal delivery.We apologize for the disruption and will provide updates as more information becomes available.
Cloudflare - Increased error rate in Workflow Operations
Oct 24, 13:57 UTCResolved - This incident has been resolved.Oct 24, 13:38 UTCMonitoring - We are continuing to monitor for any further issues.Oct 24, 13:13 UTCInvestigating - Cloudflare is investigating issues causing an increase of errors for Workflow Operations. We are working to analyze and mitigate this problem. More updates to follow shortly.
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. "On May 27, 2026, a configuration file was committed to the public LiteLLM-Labs/lite-harness repository which inadvertently contained the master key to a deployment of
[MEGATHREAD] October 2026 Cybersecurity Incidents: PHP2Shell, LiteLLM, eMudhra, GitLab, and more
[MEGATHREAD] PHP2Shell (CVE-2026-109618/109619), LiteLLM, eMudhra, GitLab & Other October Security Incidents AKA Black October We've been getting hammered with posts and questions about the wave of vulnerabilities, compromises, and other security incidents over the past week. A lot are duplicative, and there is a wave of vibe coded crap getting shared that doesn't really do much in this situation....
Cloudflare - Network Performance Issues in Ashburn
Oct 24, 01:28 UTCMonitoring - A fix has been implemented and we are monitoring the results.Oct 24, 01:05 UTCInvestigating - Affected services: Durable Objects, R2, Workflows, Queues, D1 and Artifacts.Oct 24, 01:01 UTCInvestigating - Cloudflare is investigating issues with Network Performance in Ashburn, VA. We are working to analyze and mitigate this problem. More updates to follow shortly.
Asana - Background jobs partial outage
Oct 23, 23:57 UTC Investigating - We have a significant degradation in our system for processing asynchronous work. We previously had some crashes from web application users, but that appears to have resolved. We're monitoring the asynchronous work.
GitHub - Grok 4.6 and Grok 4.7 Service Issues
Oct 23, 23:42 UTC Update - We are experiencing degraded availability for the Grok 4.6 and Grok 4.7 models in Copilot products and IDE surfaces. This is due to an issue with an upstream model provider. While we work with them to resolve the issue, we recommend choosing another model or selecting 'Auto' to continue using Copilot. Oct 23, 23:41 UTC Investigating - We are investigating reports of degraded performance for Copilot AI Model Providers
Cloudflare - NBO (Nairobi) on 2026-10-23
Oct 23, 22:45 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 23, 21:45 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 23, 10:00 UTCScheduled - We will be performing scheduled maintenance in NBO (Nairobi) datacenter between 2026-10-23 22:45 and 2026-10-26 23:45 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users...
Cloudflare - CGK (Jakarta) on 2026-10-23
Oct 23, 19:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 23, 18:01 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 15:01 UTCScheduled - We will be performing scheduled maintenance in CGK (Jakarta) datacenter on 2026-10-23 between 19:00 and 23:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...
Cloudflare - IST (İstanbul) on 2026-10-22
Oct 23, 18:15 UTCCompleted - The scheduled maintenance has been completed.Oct 22, 18:02 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 17:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 20, 10:40 UTCScheduled - We will be performing scheduled maintenance in IST (İstanbul) datacenter between 2026-10-22 18:00 and 2026-10-23 18:15 UTC. Traffic might be re-routed from this location, hence there is a possibility o...
Cloudflare - TPE (Taipei) on 2026-10-23
Oct 23, 18:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 23, 17:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 15:01 UTCScheduled - We will be performing scheduled maintenance in TPE (Taipei) datacenter on 2026-10-23 between 18:00 and 22:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the a...
Cloudflare - MNL (Manila) on 2026-10-23
Oct 23, 17:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:40 UTCScheduled - We will be performing scheduled maintenance in MNL (Manila) datacenter on 2026-10-23 between 18:00 and 22:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this...
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. GitLab found that a specially crafted pattern could corrupt memory while Ruby compiles it, potentially leading to code execution on its own servers. Ruby says any
Zoom - Service Degradation Affecting Multiple Zoom Services
Oct 23, 09:48 PDT Resolved - This incident has been resolved and the affected service has been restored. Oct 23, 09:24 PDT Monitoring - The service degradation affecting multiple Zoom Services has been successfully resolved. Our team will continue to monitor the situation closely and keep you informed of any further developments. Oct 23, 09:20 PDT Update - Our team is actively working on a resolution, and we will keep you informed with timely updates as progress is made. Oct 23, 09:16 PDT...
HubSpot - Some HubSpot tools may be unavailable for some users
Oct 23, 12:32 EDT Monitoring - We've addressed the issue that caused HubSpot to be unavailable to users in North America since 11:28 AM EDT (UTC -04:00). We're monitoring performance closely to ensure the tools recover properly.The information on this page reflects our understanding of the incident and impact at the time of the update. Oct 23, 12:07 EDT Investigating - HubSpot is currently unavailable for users in North America due to a Cloudflare outage - https://www.cloudflarestatus.com/inc...
Vercel - Delays in Logs and Observability data
Oct 23, 16:31 UTC Identified - We have identified the issue causing delays in Logs and Observability data and are working on a fix. We will provide additional updates as they become available.
Cloudflare - Degraded network performance affecting some traffic between Cloudflare data centers
Oct 23, 15:47 UTCInvestigating - We are investigating degraded network performance affecting some traffic between our Ashburn and Atlanta data centers. Some customers may see increased latency, packet loss, or intermittent errors on Workers and other services in the Eastern US. Our network team is actively working on mitigation.
Cloudflare - Delayed, missed, and duplicated Workers Cron Triggers
Oct 23, 15:27 UTCInvestigating - We are investigating reports that some Workers Cron Triggers are running late, being skipped, or running more than once. Affected customers may see scheduled Workers invocations that do not run on time or run more than once. We will post an update as we learn more.
GitHub - Disruption with Dependabot Alerts
Oct 23, 14:58 UTC Investigating - We are investigating reports of impacted performance for some GitHub services.
Optimizely - Degraded Performance - CMS Edit Mode in DXP
Oct 23, 14:55 UTC Monitoring - System performance has returned to normal levels, and the degradation has subsided. Our team is closely monitoring the environment to ensure continued stability Oct 23, 14:41 UTC Identified - We have identified the root cause of the performance degradation and are actively working on a fix. We will share further updates as more information becomes available.Thank you once again for your understanding and cooperation. Oct 23, 14:14 UTC Update - We are continuin...
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. "Artifacts from this investigation also indicate that operators in this campaign have obtained access to numerous organizations worldwide, and have attempted to further compromise some victims,
RLSA-2026:88280: GitHub Vulnerability
Important: golang-github-openprinting-ipp-usb security update
RLSA-2026:88316: Grafana Labs Vulnerability
Important: grafana-pcp security update
Akamai - Customer Security Advisory: Node.js Brotli Remote Code Execution Vulnerability
Oct 23, 12:00 UTC Investigating - Akamai is aware of the recently published remote code execution vulnerability: CVE-2026-111497.Our subject matter experts are actively investigating and taking the appropriate mitigation actions, while we continue to monitor our platform in parallel. We will provide updates as additional information becomes available.In the interest of time, we are providing you with the most current information available, which is subject to changes, corrections, and updates.
Cloudflare - Cloudflare Access Availability Issues
Oct 23, 09:22 UTCResolved - This incident has been resolved.Oct 23, 09:15 UTCMonitoring - A fix has been implemented and we are monitoring the results.Oct 23, 09:12 UTCIdentified - The issue has been identified and a fix is being implemented.Oct 23, 09:01 UTCInvestigating - Cloudflare is investigating issues with Cloudflare Access when using Microsoft Entra ID. We are working to understand the full impact and mitigate this problem. More updates to follow shortly.
SendGrid - MMS Delivery Failures From A Subset Of Network Subscribers In Australia To Twilio Australia Phone Numbers
Oct 23, 01:36 PDT Resolved - This incident has been resolved. MMS delivery from Australian network subscribers to Twilio Australia Phone Numbers is operating as expected within documented specifications. Media attachments under 1MB continue to deliver normally. Attachments exceeding 1MB remain subject to carrier constraints and best-effort delivery. We recommend keeping all media payloads under 1MB to ensure consistent delivery. Oct 14, 00:19 PDT Update - Our team continues to investigate MMS...
Twilio - MMS Delivery Failures From A Subset Of Network Subscribers In Australia To Twilio Australia Phone Numbers
Oct 23, 01:36 PDT Resolved - This incident has been resolved. MMS delivery from Australian network subscribers to Twilio Australia Phone Numbers is operating as expected within documented specifications. Media attachments under 1MB continue to deliver normally. Attachments exceeding 1MB remain subject to carrier constraints and best-effort delivery. We recommend keeping all media payloads under 1MB to ensure consistent delivery. Oct 14, 00:19 PDT Update - Our team continues to investigate MMS...
GitHub - Delayed Actions status check results
Oct 23, 07:53 UTC Monitoring - The degradation affecting Actions has been mitigated. We are monitoring to ensure stability. Oct 23, 07:31 UTC Update - We are seeing delays in results from Actions workflows being reported within GitHub starting from 07:07 UTC.Recovery is already being seen but our team is continuing to investigate and monitor performance. Oct 23, 07:29 UTC Investigating - We are investigating reports of degraded performance for Actions
SendGrid - Italy SMS Carrier Partner Maintenance
Oct 23, 00:30 PDT Completed - The scheduled maintenance has been completed. Oct 22, 23:30 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 22, 09:11 PDT Scheduled - Our SMS carrier partner in Italy is conducting a planned maintenance from 22 October 2026 at 23:30 PDT until 23 October 2026 at 00:30 PDT. During the maintenance window, there could be intermittent delays delivering SMS to Italy handsets.We are aware of the short notice ...
Twilio - Italy SMS Carrier Partner Maintenance
Oct 23, 00:30 PDT Completed - The scheduled maintenance has been completed. Oct 22, 23:30 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 22, 09:11 PDT Scheduled - Our SMS carrier partner in Italy is conducting a planned maintenance from 22 October 2026 at 23:30 PDT until 23 October 2026 at 00:30 PDT. During the maintenance window, there could be intermittent delays delivering SMS to Italy handsets.We are aware of the short notice ...
SendGrid - SMS Delivery Delays from a Subset of Twilio Short Codes to Claro Colombia
Oct 22, 23:57 PDT Resolved - The incident has been resolved and SMS delivery from a subset of Twilio Short Codes to Claro network subscribers in Colombia is operating normally. Oct 22, 21:56 PDT Monitoring - We have observed a recovery in SMS delivery from a subset of Twilio Short Codes to Claro network subscribers in Colombia and are monitoring service stability. We will provide another update in 2 hours or as soon as more information becomes available. Oct 22, 21:36 PDT Identified - Twili...
Twilio - SMS Delivery Delays from a Subset of Twilio Short Codes to Claro Colombia
Oct 22, 23:57 PDT Resolved - The incident has been resolved and SMS delivery from a subset of Twilio Short Codes to Claro network subscribers in Colombia is operating normally. Oct 22, 21:56 PDT Monitoring - We have observed a recovery in SMS delivery from a subset of Twilio Short Codes to Claro network subscribers in Colombia and are monitoring service stability. We will provide another update in 2 hours or as soon as more information becomes available. Oct 22, 21:36 PDT Identified - Twili...
SendGrid - Brazil SMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 22, 22:00 - 23:00 PDT Oct 22, 13:34 PDT Scheduled - Our SMS carrier partner in Brazil is conducting a planned maintenance from 22 October 2026 at 22:00 PDT until 22 October 2026 at 23:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Brazil handsets.We are aware of the short notice and are working with our Carrier Partners to provide earlier notification where possible.
Twilio - Brazil SMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 22, 22:00 - 23:00 PDT Oct 22, 13:34 PDT Scheduled - Our SMS carrier partner in Brazil is conducting a planned maintenance from 22 October 2026 at 22:00 PDT until 22 October 2026 at 23:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Brazil handsets.We are aware of the short notice and are working with our Carrier Partners to provide earlier notification where possible.
Elastic Cloud - Elastic Support Portal is unavailable
Oct 23, 04:59 UTC Identified - We have identified an issue preventing access to the Elastic Support portal caused by an upstream provider. The provider has confirmed a fix that has restored access for some of its affected environments and is now rolling it out to the rest. At this time, customers may experience issues authenticating to the support portal. Oct 23, 04:04 UTC Investigating - We are currently investigating an issue preventing access to the Elastic Support portal. At this time, cu...
Cloudflare - Support Helpdesk Availability Issues
Oct 23, 04:43 UTCIdentified - We are continuing to work on a fix for the issue.Oct 23, 03:37 UTCIdentified - Support portal, live chat support and emergency telephone line are still unavailable due to the ongoing helpdesk provider outage. Customers may experience issues submitting or viewing tickets/chats, and overall response times may be delayed. Customers with urgent issues should revert to using the support email address (backupsupport@cloudflare.com).Oct 23, 03:03 UTCInvestigating - Our ...
Cloudflare - PAT (Patna) on 2026-10-22
Oct 23, 01:01 UTCCompleted - The scheduled maintenance has been completed.Oct 22, 21:01 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 20:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in PAT (Patna) datacenter between 2026-10-22 21:00 and 2026-10-23 01:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a...
Cloudflare - Delayed audit log delivery for WARP and Zero Trust services
Oct 23, 00:10 UTCResolved - This incident has been resolved.Oct 22, 17:50 UTCMonitoring - A fix has been implemented and we are monitoring the results.Oct 22, 17:32 UTCInvestigating - We are investigating an issue affecting audit log delivery for WARP API. Audit logs for some customers may be delayed or not delivered, and some dependent services may also be affected. We have identified the cause as a capacity problem in a shared internal data pipeline in our PDX region. Mitigations are in place...
Cloudflare - Elevated error rates for Durable Objects in Western Europe
Oct 23, 00:09 UTCResolved - This incident has been resolved.Oct 22, 18:19 UTCMonitoring - A fix has been implemented and we are monitoring the results.Oct 22, 17:51 UTCInvestigating - We are investigating elevated error rates affecting Durable Objects in Western Europe. Customers may see errors when using Durable Objects and related services. We will post updates as we learn more.
Cloudflare - WAW (Warsaw) on 2026-10-23
Oct 23, 00:02 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 23:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 22, 07:50 UTCScheduled - We will be performing scheduled maintenance in WAW (Warsaw) datacenter on 2026-10-23 between 00:00 and 07:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the a...
Cloudflare - DAC (Dhaka) on 2026-10-22
Oct 23, 00:01 UTCCompleted - The scheduled maintenance has been completed.Oct 22, 20:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 19:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in DAC (Dhaka) datacenter between 2026-10-22 20:00 and 2026-10-23 00:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a...
Cloudflare - DAC (Dhaka) on 2026-10-22
Oct 23, 00:00 UTCCompleted - The scheduled maintenance has been completed.Oct 22, 20:01 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 19:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in DAC (Dhaka) datacenter between 2026-10-22 20:00 and 2026-10-23 00:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a...
Cloudflare - SEA (Seattle) on 2026-10-21
Oct 22, 23:00 UTCCompleted - The scheduled maintenance has been completed.Oct 21, 21:30 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 21, 21:20 UTCScheduled - We will be performing scheduled maintenance in SEA (Seattle) datacenter between 2026-10-21 21:30 and 2026-10-22 23:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in t...
Amplitude - Streaming to External Destinations Unavailable
Oct 22, 15:19 PDT Update - We have identified the root cause of the issue affecting streaming to external destinations, and our systems are now recovering.Our Engineering team is continuing to implement the necessary fixes while closely monitoring service recovery.We will provide further updates as progress continues.We appreciate your patience and understanding. Oct 22, 15:08 PDT Identified - We are currently investigating an issue affecting streaming to external destinations. During this ti...
Cloudflare - MNL (Manila) on 2026-10-22
Oct 22, 22:01 UTCCompleted - The scheduled maintenance has been completed.Oct 22, 18:01 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 17:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in MNL (Manila) datacenter on 2026-10-22 between 18:00 and 22:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight...
Cloudflare - MNL (Manila) on 2026-10-22
Oct 22, 22:00 UTCCompleted - The scheduled maintenance has been completed.Oct 22, 18:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 17:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in MNL (Manila) datacenter on 2026-10-22 between 18:00 and 22:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight...
SendGrid - Kazakhstan SMS Carrier Maintenance - Tele2
Oct 22, 15:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 22, 04:30 PDT Scheduled - The Tele2 network in Kazakhstan is conducting a planned maintenance from 22 October 2026 at 15:00 PDT until 22 October 2026 at 21:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to Tele2 Kazakhstan handsets.We are aware of the short notice and are working with our Carrier Partners to provide earlier notific...