AI Security Digest
Aggregated ecosystem risk analysis
Vendor Watchlist
Tracking 0 critical integrations
Threat Stream Feed
Real-time security logs and system alerts
Twilio - SMS Delivery Delays from a Subset of Twilio Short Codes to Claro Colombia
Oct 22, 23:57 PDT Resolved - The incident has been resolved and SMS delivery from a subset of Twilio Short Codes to Claro network subscribers in Colombia is operating normally. Oct 22, 21:56 PDT Monitoring - We have observed a recovery in SMS delivery from a subset of Twilio Short Codes to Claro network subscribers in Colombia and are monitoring service stability. We will provide another update in 2 hours or as soon as more information becomes available. Oct 22, 21:36 PDT Identified - Twili...
SendGrid - SMS Delivery Delays from a Subset of Twilio Short Codes to Claro Colombia
Oct 22, 23:57 PDT Resolved - The incident has been resolved and SMS delivery from a subset of Twilio Short Codes to Claro network subscribers in Colombia is operating normally. Oct 22, 21:56 PDT Monitoring - We have observed a recovery in SMS delivery from a subset of Twilio Short Codes to Claro network subscribers in Colombia and are monitoring service stability. We will provide another update in 2 hours or as soon as more information becomes available. Oct 22, 21:36 PDT Identified - Twili...
SendGrid - Brazil SMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 22, 22:00 - 23:00 PDT Oct 22, 13:34 PDT Scheduled - Our SMS carrier partner in Brazil is conducting a planned maintenance from 22 October 2026 at 22:00 PDT until 22 October 2026 at 23:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Brazil handsets.We are aware of the short notice and are working with our Carrier Partners to provide earlier notification where possible.
Twilio - Brazil SMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 22, 22:00 - 23:00 PDT Oct 22, 13:34 PDT Scheduled - Our SMS carrier partner in Brazil is conducting a planned maintenance from 22 October 2026 at 22:00 PDT until 22 October 2026 at 23:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Brazil handsets.We are aware of the short notice and are working with our Carrier Partners to provide earlier notification where possible.
Elastic Cloud - Elastic Support Portal is unavailable
Oct 23, 04:59 UTC Identified - We have identified an issue preventing access to the Elastic Support portal caused by an upstream provider. The provider has confirmed a fix that has restored access for some of its affected environments and is now rolling it out to the rest. At this time, customers may experience issues authenticating to the support portal. Oct 23, 04:04 UTC Investigating - We are currently investigating an issue preventing access to the Elastic Support portal. At this time, cu...
Cloudflare - Support Helpdesk Availability Issues
Oct 23, 04:43 UTCIdentified - We are continuing to work on a fix for the issue.Oct 23, 03:37 UTCIdentified - Support portal, live chat support and emergency telephone line are still unavailable due to the ongoing helpdesk provider outage. Customers may experience issues submitting or viewing tickets/chats, and overall response times may be delayed. Customers with urgent issues should revert to using the support email address (backupsupport@cloudflare.com).Oct 23, 03:03 UTCInvestigating - Our ...
Cloudflare - PAT (Patna) on 2026-10-22
Oct 23, 01:01 UTCCompleted - The scheduled maintenance has been completed.Oct 22, 21:01 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 20:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in PAT (Patna) datacenter between 2026-10-22 21:00 and 2026-10-23 01:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a...
Cloudflare - Delayed audit log delivery for WARP and Zero Trust services
Oct 23, 00:10 UTCResolved - This incident has been resolved.Oct 22, 17:50 UTCMonitoring - A fix has been implemented and we are monitoring the results.Oct 22, 17:32 UTCInvestigating - We are investigating an issue affecting audit log delivery for WARP API. Audit logs for some customers may be delayed or not delivered, and some dependent services may also be affected. We have identified the cause as a capacity problem in a shared internal data pipeline in our PDX region. Mitigations are in place...
Cloudflare - Elevated error rates for Durable Objects in Western Europe
Oct 23, 00:09 UTCResolved - This incident has been resolved.Oct 22, 18:19 UTCMonitoring - A fix has been implemented and we are monitoring the results.Oct 22, 17:51 UTCInvestigating - We are investigating elevated error rates affecting Durable Objects in Western Europe. Customers may see errors when using Durable Objects and related services. We will post updates as we learn more.
Cloudflare - WAW (Warsaw) on 2026-10-23
Oct 23, 00:02 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 23:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 22, 07:50 UTCScheduled - We will be performing scheduled maintenance in WAW (Warsaw) datacenter on 2026-10-23 between 00:00 and 07:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the a...
Cloudflare - DAC (Dhaka) on 2026-10-22
Oct 23, 00:01 UTCCompleted - The scheduled maintenance has been completed.Oct 22, 20:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 19:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in DAC (Dhaka) datacenter between 2026-10-22 20:00 and 2026-10-23 00:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a...
Cloudflare - DAC (Dhaka) on 2026-10-22
Oct 23, 00:00 UTCCompleted - The scheduled maintenance has been completed.Oct 22, 20:01 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 19:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in DAC (Dhaka) datacenter between 2026-10-22 20:00 and 2026-10-23 00:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a...
Cloudflare - SEA (Seattle) on 2026-10-21
Oct 22, 23:00 UTCCompleted - The scheduled maintenance has been completed.Oct 21, 21:30 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 21, 21:20 UTCScheduled - We will be performing scheduled maintenance in SEA (Seattle) datacenter between 2026-10-21 21:30 and 2026-10-22 23:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in t...
Amplitude - Streaming to External Destinations Unavailable
Oct 22, 15:19 PDT Update - We have identified the root cause of the issue affecting streaming to external destinations, and our systems are now recovering.Our Engineering team is continuing to implement the necessary fixes while closely monitoring service recovery.We will provide further updates as progress continues.We appreciate your patience and understanding. Oct 22, 15:08 PDT Identified - We are currently investigating an issue affecting streaming to external destinations. During this ti...
Cloudflare - MNL (Manila) on 2026-10-22
Oct 22, 22:01 UTCCompleted - The scheduled maintenance has been completed.Oct 22, 18:01 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 17:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in MNL (Manila) datacenter on 2026-10-22 between 18:00 and 22:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight...
Cloudflare - MNL (Manila) on 2026-10-22
Oct 22, 22:00 UTCCompleted - The scheduled maintenance has been completed.Oct 22, 18:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 22, 17:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in MNL (Manila) datacenter on 2026-10-22 between 18:00 and 22:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight...
SendGrid - Kazakhstan SMS Carrier Maintenance - Tele2
Oct 22, 15:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 22, 04:30 PDT Scheduled - The Tele2 network in Kazakhstan is conducting a planned maintenance from 22 October 2026 at 15:00 PDT until 22 October 2026 at 21:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to Tele2 Kazakhstan handsets.We are aware of the short notice and are working with our Carrier Partners to provide earlier notific...
Twilio - Kazakhstan SMS Carrier Maintenance - Tele2
THIS IS A SCHEDULED EVENT Oct 22, 15:00 - 21:00 PDT Oct 22, 04:30 PDT Scheduled - The Tele2 network in Kazakhstan is conducting a planned maintenance from 22 October 2026 at 15:00 PDT until 22 October 2026 at 21:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to Tele2 Kazakhstan handsets.We are aware of the short notice and are working with our Carrier Partners to provide earlier notification where possible.
Cloudflare - Network Error Log Processing Unavailable
Oct 22, 21:36 UTCMonitoring - A fix has been implemented and we are monitoring the results.Oct 22, 20:08 UTCInvestigating - Partial service restored. Root cause investigation is currently underway.Oct 22, 16:30 UTCInvestigating - Since 20:19 UTC, new Network Error Logging (NEL) reports are not being processed. Reports received during this period will not appear in Network Error Logging analytics. Website traffic and other services are not affected. We are investigating and will provide an update...
Amplitude - Amplitude Website Outage
Oct 22, 14:25 PDT Resolved - This incident has been resolved. Oct 22, 14:24 PDT Investigating - Some web pages were partially down. The issue started around 2:06 PM PST and was resolved at 2:21 PM PST.a) Our ingestion systems were working as expected and we were not losing any data. c) Impacted customers might have experienced errors when loading Amplitude web pages.
Cloudflare - PAT (Patna) on 2026-10-22
Oct 22, 20:01 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in PAT (Patna) datacenter between 2026-10-22 21:00 and 2026-10-23 01:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecti...
Cloudflare - KHI (Karachi) on 2026-10-22
Oct 22, 20:01 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in KHI (Karachi) datacenter between 2026-10-22 21:00 and 2026-10-23 01:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expec...
Cloudflare - BOM (Mumbai) on 2026-10-22
Oct 22, 20:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 17, 17:11 UTCScheduled - We will be performing scheduled maintenance in BOM (Mumbai) datacenter between 2026-10-22 21:00 and 2026-10-23 01:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expect...
Cloudflare - KHI (Karachi) on 2026-10-22
Oct 22, 20:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Oct 8, 16:20 UTCScheduled - We will be performing scheduled maintenance in KHI (Karachi) datacenter between 2026-10-22 21:00 and 2026-10-23 01:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expec...
Akamai - Customer Security Advisory: Critical F5/NGINX Out-of-Band Vulnerabilities
Oct 22, 20:17 UTC Investigating - Akamai is aware of the recently published F5/NGINX vulnerabilities (CVE-2026-15176, CVE-2026-97205, and CVE-2026-93479), and our teams are investigating their potential impact across our platform and infrastructure.F5 has released out-of-band security patches addressing three critical severity vulnerabilities in NGINX Open Source and NGINX Plus. These vulnerabilities may allow unauthenticated attackers to trigger heap buffer overflows, which could cause a denia...
SendGrid - Russia SMS Carrier Maintenance - MegaFon
THIS IS A SCHEDULED EVENT Oct 22, 13:00 - 17:00 PDT Oct 21, 05:39 PDT Scheduled - The MegaFon network in Russia is conducting a planned maintenance from 22 October 2026 at 13:00 PDT until 22 October 2026 at 17:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to MegaFon Russia handsets.
Twilio - Russia SMS Carrier Maintenance - MegaFon
THIS IS A SCHEDULED EVENT Oct 22, 13:00 - 17:00 PDT Oct 21, 05:39 PDT Scheduled - The MegaFon network in Russia is conducting a planned maintenance from 22 October 2026 at 13:00 PDT until 22 October 2026 at 17:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to MegaFon Russia handsets.
Zoom - Service Degradation Affecting Zoom Meetings Services in the US.
Oct 22, 12:32 PDT Identified - We have successfully identified the root cause of intermittent meeting disconnects affecting a subset of users in the US region.Our team is actively working on a resolution, and we will keep you informed with timely updates as progress is made. Thank you for your patience. Oct 22, 12:16 PDT Investigating - We are currently investigating a service degradation affecting a subset of users, causing intermittent meeting disconnects in the US region.Our team is active...
Amplitude - Notice: Amplitude not impacted by recent PHP vulnerabilities
Oct 22, 12:25 PDT Resolved - Amplitude has confirmed that no first-party Amplitude services are impacted by the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (PHP2Shell Advisory). We are working with an affected third-party vendor to establish security updates on their end; however, internal hardening efforts should prevent potential escalation.No customer action is required at this time. As this is a developing advisory, any further updates will be communicated appropriately via our ...
Slack - Incident: Slack Real-Time Connection Disruption
Some Slack customers experienced disrupted real-time connections, delayed message delivery, and errors loading conversation history on October 22, 2026, starting at 16:08 UTC. A large number of active connections closed at once and then reconnected, which briefly strained the services customers rely on to send and read messages. By 16:26 UTC, connections had reconnected and service had returned to normal. We apologize for how this incident affected you and your business. We will undertake a full...
Supabase - Log Drain Issues
Status: ResolvedThis issue is now resolved.Affected components Logging & Observability (Operational)
Supabase - API Gateway Request Issues
Status: MonitoringThe mitigations have managed the demand spike. We are monitoring for continued stability.Affected components eu-north-1 (Operational) us-west-2 (Operational) sa-east-1 (Operational) ap-northeast-1 (Operational) ca-central-1 (Operational) eu-central-2 (Operational) ap-southeast-1 (Operational) ap-south-1 (Operational) us-west-1 (Operational) ap-east-1 (Operational) eu-west-3 (Operational) eu-west-2 (Operational) ap-southeast-1 (Operational) ap-southeast-2 (O...
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. And the week isn't even over yet. But those big headlines are only half the story. Stolen passwords, exposed
HashiCorp - GitHub and Other VCS workloads experiencing intermittent issues
Status: InvestigatingWe are continuing to receive reports of intermittent issues with VCS workloads, some of which are not hosted on GitHub.com "GitHub.com": http://GitHub.com. Our engineering team is investigating these issues. Current impact state: VCS workloads experiencing intermittent issues. Action underway: Awaiting word from GitHub.com "GitHub.com": http://GitHub.com Next update time: 18:00 UTCAffected components HCP Terraform (Partial outage)
Netlify - Delayed Edge Functions and Functions logs
Oct 22, 16:19 UTC Monitoring - Edge Functions and Function logs from the period between 13:58–15:35 UTC may be delayed in appearing in the Netlify UI and in log drains. We are working to process the backlog; function and edge function requests are not affected.
GitHub - Errors loading Issues, Pull Requests, and search results
Oct 22, 15:33 UTC Update - Some users may experience intermittent errors loading Issues, Pull Requests and search results on github.com. We're investigating and working to restore normal service. Oct 22, 15:28 UTC Investigating - We are investigating reports of degraded performance for Actions, Issues and Pull Requests
GitHub - Incident with Actions Results
Oct 22, 14:35 UTC Update - Repository update processing has recovered. We’re continuing to work on delays affecting GitHub Actions workflow and step results. We’ll share another update as we make progress. Oct 22, 14:19 UTC Update - We’re investigating delays in processing GitHub Actions workflow and step results, along with some repository updates. Oct 22, 14:18 UTC Investigating - We are investigating reports of degraded performance for Actions
ActiveCampaign - System outage - 10/22/2026
Oct 22, 06:56 CDT Identified - We are currently investigating a system outage. Updates will be provided as they become available.
Supabase - Elevated Mgmt API Error Rates in Multiple Regions
Status: InvestigatingWe are investigating elevated error rates and increased response times on the Management API across multiple regions. Some operations that depend on it, such as creating new projects, may fail or be slow. This is also causing logins to supabase.com to timeout.Affected components ap-southeast-1 (Partial outage) Dashboard (Partial outage) us-east-1 (Partial outage) eu-west-1 (Partial outage) us-west-1 (Partial outage)
Elastic Cloud - 403 error when trying to access Autoops in newly created serverless projects
Oct 22, 11:19 UTC Investigating - We are investigating an issue affecting AutoOps for newly created accounts in the AWS us-east-1 region. Accounts created after 00:00 UTC on October 22, 2026 may be unable to access AutoOps and may see an error (HTTP 403) when opening it.Elastic Cloud Hosted: AutoOps is not available for affected new accounts.Elastic Cloud Serverless: AutoOps is not available for affected new accounts.Existing deployments and projects, and all other Elastic Cloud functionality, ...
Optimizely - Optimizely Campaign: Campaign user interface
Oct 22, 11:18 UTC Identified - The issue has been identified and a fix is being implemented. Oct 22, 11:17 UTC Investigating - We are currently investigating an event that is impacting performance of the graphical user interface.
Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation
Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have gained access to encrypted environment variables, and, in some cases, obtained the decrypted contents. The impact, it said, is limited to a "subset of users,
GCP - RESOLVED: Multiple services were experiencing issues in the europe-west2 region.
Incident began at 2026-10-19 23:00 and ended at 2026-10-20 07:00 (all times are US/Pacific).Preliminary Incident Report We recognize that Google Cloud services are critical to your organization, and we sincerely apologize for the disruption this incident may have caused to your business. We are working to address the root cause and prevent this from occurring in the future. Please note, this information is based on our best knowledge at the time of posting and is subject to change as our invest...
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package containing a credential stealer and a backdoor. On October 21, 2026, LiteLLM's release pipeline was compromised to push 1.107.0 to the Docker Hub registry and the Python Package Index (PyPI) repository. The incident took place around 4:00 a.m.
Supabase - Project lifecycle operation errors in the EU region
Status: MonitoringWe identified increased error rates in project lifecycle operations (create, restore, pauses, etc.) in the EU region since 21 Oct 23:00 UTC. A mitigation has been put in place and error rates have reduced to normal levels. We are monitoring the situation and are working on fixing affected projects.Affected components eu-west-1 (Partial outage)
Plaid - Service Disruption Impacting Chase connections
Status: ResolvedThis incident has been resolved.
HubSpot - Some HubSpot tools may be unavailable for some users
Oct 21, 21:38 EDT Investigating - HubSpot is aware of the recently disclosed PHP security vulnerability. PHP isn't part of HubSpot's infrastructure, and we are not aware of any impact to our platform or customers. We will continue to watch the situation and provide an update if our assessment changes.
CVE-2026-109618 and CVE-2026-109619 Are Two Directions Through the Same Pre-RINIT Window
Leak hit HN 2026-10-20 15:20Z. PHP 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35 fix both CVEs. Mechanism: php_request_startup() calls php_hash_environment() (multipart parse, the session.upload_progress callback, php_session_initialize() on the process-wide BG(serialize)/BG(unserialize)) one line before zend_activate_modules() runs basic's RINIT, which is what zeroes them. CVE-2026-109618 is the exit direc...
Mixpanel - Degraded Service for Requests to decide.mixpanel.com
Oct 21, 11:00 PDT Monitoring - We've received reports that requests to decide.mixpanel.com are failing.Any traffic sent through decide.mixpanel.com may be affected, including feature flags and event tracking.To restore service now, point requests to api.mixpanel.com (US), api-eu.mixpanel.com (EU), or api-in.mixpanel.com (IN), depending on your project's Data Residency.We've rolled out a mitigation and are monitoring the results. We're seeing traffic restored. We will post progress updates on ou...
CircleCI - Increased Docker gen2 wait times
Oct 21, 20:54 UTC Resolved - Wait times for gen2 Docker jobs have recovered and jobs are running within normal wait times. Oct 21, 20:40 UTC Monitoring - We have seen a full recovery of wait times for docker jobs. Oct 21, 20:35 UTC Update - Wait times for 2xlarge docker jobs are now under 60 seconds.Wait times for other resource sizes were not impacted by this incident and remain under 10 seconds. Oct 21, 20:22 UTC Update - Wait times for 2xlarge docker jobs are recovering. We will contin...
Optimizely - ODP EU Region - Impact due to Snowflake incident
Oct 21, 19:07 UTC Identified - ODP Reports, campaigns and exports are impacted due to a Snowflake EU incident. Real-time segments are unaffected.
Akamai - Edge Delivery Secure CDN platform at Risk of Capacity Issues
Oct 21, 18:59 UTC Investigating - We are investigating an emerging issue with our Secure CDN platform with risk of impacting capacity. We are actively investigating the issue and will provide another update within the next 30 minutes.We will soon be posting more details for customers and partners with a valid Control Center login at https://community.akamai.com/customers/s/group/0F90f000000DFgx/service-incident-notifications. If you have questions or are experiencing an impact due to this issue...
Snowflake - INC20000301
Oct 21, 18:58 UTC Update - Current status: We're investigating the core systems that process requests in the impacted region to assist us in isolating the source of the impact and identifying a path to resolution. We'll provide another update within 30 minutes.Customer experience: Customers hosted in the specified region may be unable to access or use multiple core Snowflake services and features. Affected users may be unable to sign in, use Snowsight, execute queries, or ingest files using Sno...
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014. The fix matters even for administrators who patched nine days earlier: the October 12 update covered only versions 19.2 and later, and the new fixed versions sit one patch above it, so an
LaunchDarkly - Action Recommended: Update SDKs and Relay Proxy for eMudhra CA Issue
Oct 21, 11:40 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 21, 11:34 PDT Scheduled - We currently have no indication that LaunchDarkly-hosted services or customer data are impacted by the publicly-disclosed compromised intermediate CA certificates from eMudhra (https://emudhra.we-have-a-problem.com/). This guidance applies to all LaunchDarkly instances: Commercial, EU, and Federal.LaunchDarkly has already taken precautionary steps...
Mixpanel - Degraded Service for Requests to decide.mixpanel.com
Oct 21, 11:04 PDT Monitoring - We’ve received reports that requests to decide.mixpanel.com are failing. Any traffic sent through decide.mixpanel.com may be affected, including feature flags and event tracking. To restore service now, point requests to api.mixpanel.com (US), api-eu.mixpanel.com (EU), or api-in.mixpanel.com (IN) depending on your project's Data Residency.We’re rolling out a mitigation and monitoring the results. We will post progress updates on our status page. If you have any qu...
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docker images. The Python package has since been quarantined on Python Package Index (PyPI), and the
Sentry - Increased latency processing integration webhooks
Oct 21, 17:53 UTC Investigating - We are working on mitigating an incident that affects external integrations such as GitHub, Slack, and Autofix PRs. No data is being lost.
OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So
OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring while making requested software changes during two internal coding tasks. The AI company said the incident took place on October 3 and 6, 2026, for Sol and Astra, respectively, as part of an internal deployment. "A GPT-6.1 Sol agent repairing an
Akamai - Web Security Analytics, Reporting and Configuration Deployment Issues
Oct 21, 16:08 UTC Update - We are continuing to work on a fix for this issue. Customers and partners can find more details on the Akamai Community: https://community.akamai.com/customers/s/feed/0D5a700001aPoFkCAK. We will provide an update within the next 60 minutes. Oct 21, 15:46 UTC Identified - We have identified the cause of the issue, and a fix is being implemented. Customers and partners can find more details on the Akamai Community: https://community.akamai.com/customers/s/feed/0D5a700...
Akamai - NetStorage issues in Los Angeles
Oct 21, 16:01 UTC Update - We continue investigating this issue. Customers and partners can find more details on the Akamai Community: https://community.akamai.com/customers/s/feed/0D5a700001aOfDBCA0. We will provide an update within the next 120 minutes. Oct 21, 14:52 UTC Investigating - We are investigating an emerging issue with NetStorage related to performance degradation and timeouts in the Los Angeles area. We are actively investigating the issue and will provide another update within ...
Asana - Asana downtime
Oct 21, 15:51 UTC Update - We have identified the cause of this outage and have initiated changes to address this. We are seeing some signs of recovery, and will post an update once we've confirmed recovery. Oct 21, 15:33 UTC Identified - Asana services are currently experiencing a major service disruption. We have identified a likely cause and are working on applying a fix. This affects all services and all regions.
Supabase - Project lifecycle operations such as project creation, pausing, and restoration, in all regions
Status: InvestigatingWe are investigating an issue affecting project lifecycle operations such as project creation, pausing, and restoration, in all regions. We’ll provide further updates as more information becomes available.Affected components ap-southeast-1 (Partial outage) us-east-1 (Partial outage) eu-west-1 (Partial outage) us-west-1 (Partial outage)
Akamai - Customer Security Advisory: PHP Remote Code Execution Vulnerabilities
Oct 21, 15:03 UTC Investigating - Akamai is aware of the recently published remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-10961). Our subject matter experts are actively investigating and taking the appropriate measures. We have released security updates to address these CVEs and monitor for exploitation attempts. We are actively monitoring our platform while we perform the mitigation actions. If you have questions or are experiencing an impact due to this issue, please use...
Zoom - Service Degradation Affecting Zoom Learning Webpage
Oct 21, 07:53 PDT Identified - We have identified an issue with our external vendor where users are experiencing issues with Zoom Learning Webpage.We are actively working with our vendor partner to resolve this issue.We will share updates as soon as they become available. Oct 21, 07:43 PDT Investigating - We are currently investigating a service degradation affecting Zoom Learning Webpage.Our team is actively working to identify the impact and root cause. We will provide an update as soon as ...
GitHub - Delays for Pull Requests and Webhook deliveries
Oct 21, 14:52 UTC Investigating - We are investigating reports of degraded performance for Actions, Pull Requests and Webhooks
Squarespace - Acuity Scheduling: scheduled maintenance
Oct 21, 09:00 EDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 20, 18:35 EDT Scheduled - Acuity Scheduling will be undergoing maintenance during this time.
Netlify - Delays in build logs appearing in the UI
Oct 21, 11:46 UTC Investigating - We are investigating an issue causing delays in build logs appearing in the Netlify UI. Our team is actively investigating and will provide updates as we learn more.
The Harness Is the Hard Part of Agentic Pentesting
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those attacks safe to run against production and worth acting on afterward lives in the harness around the model. The harness is where the engineering in AI pentesting sits. The Hugging Face intrusion OpenAI disclosed in July
Sentry - Sentry.io not loading in US region
Oct 21, 09:53 UTC Resolved - Native events ingestion has caught up, everything should be operational now Oct 21, 09:40 UTC Update - Native events ingestion is still delayed, we are processing the backlog of native events Oct 21, 09:23 UTC Monitoring - We have identified the problem, and addressed the cause of the outage. We will continue monitoring the fix Oct 21, 08:54 UTC Investigating - We are currently investigating an issue affecting US Sentry region
Snowflake - INC20000299
Oct 21, 07:45 UTC Monitoring - Current status: We identified that a subset of infrastructure responsible for routing service traffic in the affected region became intermittently unhealthy, which caused some requests to fail. We removed the affected infrastructure from service and are monitoring the environment to confirm that all services are functioning properly. We'll provide another update within 60 minutes.Customer experience: Customers hosted in the specified regions may have experienced i...
Plaid - Service Disruption Impacting Chase connections
Status: InvestigatingChase is currently experiencing downtime impacting all channels and data recipients. Item adds and API calls through Plaid are impacted. We will provide an update when Chase has resolved the issue.Affected components Dashboard (Partial outage) API - Production (Partial outage)
Squarespace - Acuity Scheduling / Service temporarily unavailable
Oct 20, 22:30 EDT Resolved - Acuity Scheduling service was temporarily unavailable from 10:36-10:55pm US Eastern time.
ActiveCampaign - Delayed processing for automations and messages
Oct 20, 17:24 CDT Resolved - Incident has been resolved: messages are working normally and all delays have cleared. Oct 20, 17:11 CDT Monitoring - Starting at 3:54PM CDT, our team has identified a delay in messages and automations. The issue is being rolled back at this time and processing is currently recovering.
Supabase - Projects stuck in restarting state
Status: InvestigatingSome projects in us-east-2 are stuck in restarting state. We are actively investigating this and will provide more updates as information becomes available.
Amplitude - Export API returns 500 errors across multiple organizations
Oct 20, 13:21 PDT Resolved - This incident has been resolved. Oct 20, 13:13 PDT Investigating - We are investigating errors affecting some customers using the Data Export API. Affected Export API requests may return 500 errors.
Elastic Cloud - Elastic Cloud scaling issues in Azure
Oct 20, 20:07 UTC Investigating - We are investigating an issue affecting the ability to scale existing Elastic Cloud Hosted deployments and Serverless projects in Azure. New project and deployment creation in Azure may be delayed.
Sentry - Sentry.io not loading
Oct 20, 18:58 UTC Update - We have mitigated the immediate problem, but are continuing to investigate the cause. You may continue to experience interruptions using our UI and API. We will update as we know more. Oct 20, 18:20 UTC Investigating - Users are experiencing issues loading the Sentry dashboard. We are investigating the problem.
CircleCI - Increased wait times for macOS jobs using Xcode 27.0 on m4pro.large
Oct 20, 15:58 UTC Investigating - We're seeing increased wait times for some macOS jobs using Xcode 27.0 on the m4pro.large resource class. We're investigating and will provide another update soon. Thank you for your patience.
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto Networks in May 2026 and was
GCP - RESOLVED: Multiple services are experiencing issues in the europe-west2 region.
Incident began at 2026-10-19 23:08 and ended at 2026-10-20 07:00 (all times are US/Pacific).Summary Multiple services were experiencing issues in the europe-west2 region. Description The issue with impacted GCP products has been mitigated for most of the customers and it is believed to be affecting currently a very small number of customers and our Engineering Team is working on it. If you have questions or are impacted, please open a case with the Support Team and we will work with you until t...
GCP - UPDATE: Multiple services are experiencing issues in the europe-west2 region.
Incident began at 2026-10-19 23:08 (all times are US/Pacific).Summary Multiple services are experiencing issues in the europe-west2 region. Description We are seeing the recovery of services for most workloads in europe-west2 as of Tuesday, 2026-10-20 05:10 PDT. We will provide an update by Tuesday, 2026-10-20 07:00 PDT with current details. We apologize to all who are affected by the disruption. Symptoms Google Cloud services are unavailable in europe-west2-b zone; some services in europe-west...
CVE-2026-106173 Deep-Dive: Fortinet FortiSIEM gRPC Path Traversal File Write to RCE
submitted by /u/scopedsecurity [link] [comments]
#StopRansomware: SafePay Ransomware
Advisory at a Glance Title #StopRansomware: SafePay Ransomware Original Publication October 20, 2026 Executive Summary This advisory details recent activity by the SafePay ransomware group. SafePay actors have been highly active since August 2024, targeting businesses and critical infrastructure across North America, South America, Europe, and Australia. SafePay actors typically gain acce...
GCP - UPDATE: Multiple services are experiencing issues in the europe-west2 region.
Incident began at 2026-10-19 23:08 (all times are US/Pacific).Summary Multiple services are experiencing issues in the europe-west2 region. Description We are experiencing an issue with multiple services in europe-west2 beginning on Monday, 2026-10-19 23:08 PDT. A power event caused an outage within europe-west2-b zone. The power event is mitigated. We are seeing the recovery of services and are prioritizing the recovery of existing workloads.Customers may not be able to yet create new workload...
GCP - UPDATE: Multiple services are experiencing issues in the europe-west2 region.
Incident began at 2026-10-19 23:08 (all times are US/Pacific).Summary Multiple services are experiencing issues in the europe-west2 region. Description We are experiencing an issue with multiple services in europe-west2 beginning on Monday, 2026-10-19 23:08 PDT. Due to a power event we had suffered an outage within europe-west2-b zone. The power event is mitigated. Partial mitigation to infrastructure services will be observed within the next 30 minutes and the remaining services will be mitig...
GCP - UPDATE: Multiple services are experiencing issues in the europe-west2 region.
Incident began at 2026-10-19 23:08 (all times are US/Pacific).Summary Multiple services are experiencing issues in the europe-west2 region. Description We are experiencing an issue with multiple services in europe-west2 beginning on Monday, 2026-10-19 23:08 PDT. Our engineering team continues to investigate the issue. We will provide an update by Tuesday, 2026-10-20 05:00 PDT with current details. We apologize to all who are affected by the disruption. Symptoms Multiple Google Cloud services a...
GCP - UPDATE: Multiple services are experiencing issues in the europe-west2 region.
Incident began at 2026-10-19 23:08 (all times are US/Pacific).Summary Multiple services are experiencing issues in the europe-west2 region. Description We are experiencing an issue with multiple services in europe-west2 beginning on Monday, 2026-10-19 23:08 PDT. Our engineering team continues to investigate the issue. We will provide an update by Tuesday, 2026-10-20 04:00 PDT with current details. We apologize to all who are affected by the disruption. Symptoms Multiple Google Cloud services a...
GCP - UPDATE: Multiple services are experiencing issues in the europe-west2 region.
Incident began at 2026-10-19 23:08 (all times are US/Pacific).Summary Multiple services are experiencing issues in the europe-west2 region. Description We are experiencing an issue with multiple services in europe-west2 beginning on Monday, 2026-10-19 23:08 PDT. Our engineering team continues to investigate the issue. We will provide an update by Tuesday, 2026-10-20 02:30 PDT with current details. We apologize to all who are affected by the disruption. Symptoms Multiple Google Cloud services a...
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says. They were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC,
Netlify - Agent Runner failures
Oct 20, 07:47 UTC Investigating - We are investigating increased Agent Runner failures. We will share updates as we learn more.
MongoDB Atlas - GCP Availability Zone europe-west2-b connectivity issues
Oct 20, 07:32 UTC Identified - Since 0600 UTC we have observed cluster node connectivity issues isolated to a single availability zone, GCP europe-west2-b.Atlas clusters are distributed across multiple AZs and 3-node clusters can continue to serve reads and writes from nodes in the other 2 Availability Zones in this region.We are working with our partners to resolve the cause of the issue and restore service to the affected nodes.
Elastic Cloud - Degraded availability for some Elastic Cloud Hosted and Serverless deployments in GCP europe-west2 (London)
Oct 20, 06:51 UTC Investigating - We are investigating an issue affecting one availability zone in the GCP europe-west2 (London) region. Starting at approximately 06:15 UTC, some Elastic Cloud Hosted and Serverless deployments with capacity in this zone may experience degraded availability or connectivity. Monitoring and logging for deployments in the region may also be delayed. Deployments in other zones and regions are not affected. Our engineers are actively working on the issue, and we are...
Snowflake - INC20000294
Oct 20, 06:34 UTC Investigating - Current status: We're investigating an issue with Snowflake Data Cloud. We'll provide an update within 30 minutes.Customer experience: Customers hosted in the specified region may be unable to access or use multiple Snowflake services and features, including Snowflake Postgres. Affected users may experience errors or failures when connecting to Snowflake Postgres instances, managing data, loading data, or using applications.Incident start time: 06:01 UTC Octobe...
Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge
A U.S. court on Monday granted the U.S. government's request to detain a former OpenAI engineer accused of planting a recording device in an executive conference room at the company's San Francisco office to allegedly steal sensitive secrets. In a new court filing Sunday, prosecutors revealed that Abdulrahman Alfozan, a 35-year-old Saudi national, was "in frequent communications via WhatsApp
Sentry - US: Span ingestion temporarily delayed and alerting offline for database maintenance
THIS IS A SCHEDULED EVENT Oct 20, 03:00 - 05:00 UTC Oct 8, 17:06 UTC Scheduled - We will be performing a database migration in the US region that will pause span ingestion and disable span alerting for up to 2 hours. The Sentry UI and API should be available for the duration, but there will be a period of catch-up where ingestion will be behind and alerts will not fire (until ingestion has reached fresh data).
Box - [Medium] Issue with multiple Box Services
Oct 19, 19:33 PDT Update - Our team is continuing to investigate an issue with the Public API, Box Sign, and Downloads. We will provide additional information as it becomes available. Oct 19, 19:19 PDT Investigating - Our team is investigating an issue with the Public API and Box Sign. Users may see errors or timeouts when attempting to use the Public API or Box Sign. We will provide additional information as it becomes available.
Zoom - Service Degradation Affecting Meeting Summaries Via Email.
Oct 19, 16:30 PDT Update - We are continuing to work on a fix for this issue. Oct 19, 16:27 PDT Identified - We have successfully identified the root cause affecting a subset of users with meeting summary email delivery when they have selected via email only.Our team is actively working on a resolution, and we will keep you informed with timely updates as progress is made. Thank you for your patience.
Amplitude - Planned Data Processing Maintenance - EU Data Center
Oct 19, 16:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 15, 17:13 PDT Scheduled - From 23:00 Oct 19 to 01:00 Oct 20 UTC, we will be performing maintenance on components of the core ingestion infrastructure in our EU data center.During this time, customers may see data processing delays. No data loss is expected during the maintenance.The US data center won't be affected.