AI Security Digest
Aggregated ecosystem risk analysis
Vendor Watchlist
Tracking 0 critical integrations
Threat Stream Feed
Real-time security logs and system alerts
Elastic Cloud - Scheduled maintenance: Cloud console
Oct 18, 21:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 15, 17:40 UTC Scheduled - We will be performing scheduled maintenance on the Cloud console. For a brief window during this maintenance, customers may experience failures when logging in or signing up, switching organizations, managing members and roles, or creating and revoking API keys. Customers who are already logged in may be logged out. Existing API keys, Elasticsearc...
Zoom - Zoom Phone Update - Japan SIP Zones: October 18, 2026 (No Operational Impact)
Oct 18, 08:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 12, 17:45 PDT Scheduled - We will be providing an update to Zoom Phone - Japan SIP zones in Tokyo and Osaka. Please refer to https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0062333 for more details. This update includes spam warning integration for Movius identified spam calls.There is no operational impact. All services will be available during this sche...
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below - ConnectWise Cloud Backup - 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise
Open-source CVE triage in one place: KEV, EPSS, NVD and OSV combined into a single risk score
A open-source tool called CVE Intel. In simple terms, it pulls a bunch of security information sources into one place, and it doubles as an MCP server, so you can plug it into any of your AI agents.It's MIT licensed and written in Rust. Paste in a CVE and it pulls from NVD, CISA KEV, EPSS, OSV, public exploit sources and others in parallel. You get a 0–100 risk score and a short "act now or later"...
Zoom - Zoom Phone Update: October 18, 2026 (No Operational Impact)
THIS IS A SCHEDULED EVENT Oct 17, 17:00 PDT - Oct 18, 02:00 PDT Oct 12, 17:38 PDT Scheduled - We will be providing an update to Zoom Phone. Please refer to https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0062333 for more details. This update includes spam warning integration for Movius identified spam calls.There is no operational impact. All services will be available during this scheduled update.
Career Transition: From Warehouse Work to the Blue Team.
From Warehouse to Blue Team – My Journey Towards SOC L1 and Eventually DFIR Hey everyone! Back in 2010, I was doing some amateur web design, which I continued until around 2014. After that, my PC was pretty much just for gaming. I've always been a gamer, and I've always wanted a job that involved computers, but you know how life goes. I never had the experience, and probably not enough motivation ...
Xero - Xero Scheduled Maintenance - Xero Reports
Oct 17, 17:30 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 11, 23:09 UTC Scheduled - We're carrying out scheduled maintenance on Saturday 17 October 2026 from 5.30pm to 7.00pm UTC. During this window, the following features may be unavailable:- access to Xero Reports or related reporting fields, including NZ GST return- access to Client report templates, including editing practice report fields in Xero Partner HubWe appreciate you...
(QubesOS) how to safely install in dom0
i want to install liteqube from github it needs to go in dom0 i read its not a good idea to move files from untrusted vms (browser) to trusted vms (dom0) how do i lower my chances for being hacked submitted by /u/adrianchristianherna [link] [comments]
Amplitude - We are actively investigating an issue with our ingestion systems lagging
Oct 17, 07:45 PDT Monitoring - A fix has been implemented and we are monitoring the recovery. No data is lost.
Xero - Inland Revenue (NZ) Scheduled Maintenance October 17 and 18, 2026
Oct 17, 08:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 15, 23:25 UTC Scheduled - The New Zealand Inland Revenue Department (IRD) is completing planned maintenance from 9.00pm on Saturday 17 October 2026 to 5.00am on Sunday 18 October 2026, NZDT.During this time, customers may experience interruptions when filing GST returns, income tax returns or payday filings to the IRD from Xero. Please note, customers can continue to run a...
Zoom - Service Degradation Affecting Zoom Chat Compose and SMS Summarisation with AI Companion
Oct 16, 23:56 PDT Resolved - This incident has been resolved and the affected services have been restored. Oct 16, 23:16 PDT Monitoring - A service degradation affecting Zoom Chat Compose and SMS Summarisation with AI Companion has been successfully resolved.Our team will continue to monitor the situation closely and keep you informed of any further developments. Oct 16, 23:13 PDT Identified - We have successfully identified the root cause of a service degradation affecting Zoom Chat Compos...
Supabase - Project creation errors ap-ne1
Status: IdentifiedDue to an ongoing upstream provider outage, we are remediating project creation errors in apne-1. Customers may see errors in creating or unpausing a project from this region. We are working to re-direct traffic to non-impacted regions and awaiting updates from our dependant provider.Affected components ap-northeast-1 (Degraded performance) ap-northeast-1 (Degraded performance)
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs
Netlify - Elevated Build Errors
Oct 17, 05:55 UTC Resolved - This incident has been resolved. Oct 17, 05:30 UTC Monitoring - We've released a fix to resolve the errors for builds using the CSP extension, and we are monitoring the results. Oct 17, 05:03 UTC Identified - We have identified an issue with a third-party service used by our build system. Builds started on or after 21:10 UTC that use the CSP extension may experience increased errors.
1Password - High error rate on 1Password.com
Oct 16, 20:34 EDT Update - We are seeing some improvements to affected services but are continuing to investigate the issue. Oct 16, 19:45 EDT Investigating - We are currently investigating this issue.
Zoom - Zoom Virtual Agent Update: October 17, 2026 (No Operational Impact)
Oct 16, 17:01 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 13, 06:52 PDT Scheduled - We will be providing an update to Zoom Virtual Agent. Please refer to https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0067812 for more details. This update includes the ability to export Zoom Virtual Agent usage data.There is no operational impact. All services will be available during this scheduled update.
Zoom - Zoom Contact Center Update: October 17, 2026 (No Operational Impact)
Oct 16, 17:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 13, 06:48 PDT Scheduled - We will be providing an update to Zoom Contact Center. Please refer to https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0067626 for more details. This update includes warm transfer to flow for voice engagements.There is no operational impact. All services will be available during this scheduled update.
1Password - Some users are unable to view vault profiles using the web interface
Oct 16, 13:42 EDT Resolved - A fix has been deployed and this issue is now resolved. Oct 16, 13:31 EDT Identified - When choosing to view a vault profile using the web interface, a blank page is displayed instead. Our engineering team has found the root cause and are working towards deploying a fix.
Zoom - Zoom Chat Backend Update: October, 2026 (No Operational Impact)
Oct 16, 09:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 15, 04:41 PDT Scheduled - We will be providing an update to Zoom Chat Backend Service. There will be no operational impact. All services will be available during this scheduled update (ZR status might be displayed as offline in the service logs but no operational impact).
OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract
OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an Ethereum test network, spent test cryptocurrency from a third-party's wallet without authorization to complete a coding task. The incident, the AI company said, involved an internal research model part
HashiCorp - Maintenance: HCP Terraform Scheduled Maintenance
Status: ScheduledHCP Terraform and HCP Waypoint will undergo scheduled maintenance on Saturday November 14th 2026, beginning at 17:00 UTC. This maintenance is necessary to improve performance and increase capacity. We expect this maintenance to complete in under 5 hours. These services will be unavailable until maintenance completes. Customers will not be able to manually or automatically trigger Terraform operations during maintenance. Updates will be posted as necessary throughout the maint...
Sumo Logic - Problem with Billing and Account Management in North America 1 (US1), North America 2 (US2), Europe 1 (EU), Europe 2 (DE)
Oct 16, 12:44 UTC Investigating - We are currently investigating reports of problems with Billing and Account Management. We will provide more information soon.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose sign...
AI Decision Models and Their Impact on AI SOC Platforms
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman's fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public beta on October 6. Cribl published cribl-decision, an open LoRA adapter you can run locally. Others, like Laya, are
Backdooring Open-Weight AI Models
This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the most popular reason people download modified weights without verifying what’s inside. Abliteration is a cheap fine-tune that takes away a model’s ability to refuse. You find ...
Github repos compromised
Around 30000 repos were compromised with a supply chain attack https://thehackernews.com/2026/10/ghostaction-compromises-about-1900.html?m=1 submitted by /u/sbify [link] [comments]
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a
Snowflake - INC20000287
Oct 16, 01:43 UTC Resolved - Current status: We've monitored the environment and confirmed that service was restored. If you experience additional issues or have questions, please open a support case via Snowflake Community or the Support page in Snowsight.Customer experience: Customers hosted in the specified regions may have experienced intermittent delays when loading Snowsight or running queries, and some queries may have failed.Workaround: There were no available workarounds for this issue...
[CISA KEV] CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability
Product: Multiple Products by Fortinet Description: FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared
HashiCorp - HCP Terraform Scheduled Maintenance (2026-11-14)
Status: InvestigatingHCP Terraform and HCP Waypoint will undergo scheduled maintenance on Saturday November 14th 2026, beginning at 17:00 UTC. This maintenance is necessary to improve performance and increase capacity. We expect this maintenance to complete in under 5 hours. These services will be unavailable until maintenance completes. Customers will not be able to manually or automatically trigger Terraform operations during maintenance. Updates will be posted as necessary throughout the m...
Rippling - Products partially degraded
Oct 15, 19:07 UTC Investigating - We are experiencing higher than usual error rates across our products. We've identified the impacted subsystem and mitigation is in progress.
GitHub - CCA Automations are delayed when starting an Automation
Oct 15, 18:56 UTC Resolved - We suspected that CCA Automations were experiencing delays when users start an Automation, but further investigation found that there was no delay or impact to CCA Automations. Oct 15, 18:53 UTC Monitoring - The degradation has been mitigated. We are monitoring to ensure stability. Oct 15, 18:34 UTC Update - CCA Automations are experiencing delays when users start an Automation Oct 15, 18:31 UTC Investigating - We are investigating reports of impacted performa...
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong person. Old bugs are finding new victims, familiar tools are being put to strange uses, and
[Threat Intel] Dissecting a 6-Stage Lazarus ("Contagious Interview") Kill Chain: From Weaponized Git Hooks to Dual-Blockchain EtherHiding (TRON/BSC) & macOS CDP Stealers
TL;DR: I intercepted a trojanized Golang technical assessment distributed via LinkedIn social engineering (Contagious Interview / Lazarus Group) and detonated the full 6-stage execution chain in an isolated sinkhole environment. To bypass GitHub's native .git/hooks stripping and static scanners, the threat actors kept all 38 .go source files completely clean, delivered the repo as a Google Drive Z...
Where do I go next?
Hey all, I'm currently a systems engineer with about a year and a half of experience. My company gave us free access to Pluralsight but I'm unsure where to focus my time. Any recommendations? For context, my hands-on experience is primarily in vulnerability management (very familiar in Rapid7), endpoint detection and response (CS Falcon), email security (Proofpoint), and a little incident respons...
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives
Zoom - Zoom Push Notification Service Release: October, 2026 (No Operational Impact)
Oct 15, 09:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 13, 06:11 PDT Scheduled - We will be performing maintenance for Zoom Push Notification Service. No operational impact is expected.This maintenance includes the following enhancements and improvements:- Activity center enhancement- Presence enhancement- Bug fixAll services are expected to operate normally during the maintenance window.
LaunchDarkly - Elevated 5xx Errors (15:11–15:32 UTC)
Oct 15, 08:47 PDT Resolved - Between 15:11 and 15:32 UTC today, we observed elevated 5xx errors affecting requests across our services. Approximately 0.7% of requests failed during this period (99.3% succeeded). This incident has been resolved.
Plaid - Link performance degradation
Status: ResolvedThis incident has been resolved.
Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a traffic monetization operation dubbed ROI777. Help TDS is assessed to be active since at least 2017, offering PHP code templates to partners and affiliates that are installed into compromised websites with an aim to direct unsuspecting
CISA Malcolm
View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm <=v26.07.1 (CVE-2026-107336, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334) Malcolm <=v26.08.0 (CVE-2026-107333, CVE-2026-107362) CVSS Vendor Equipment v3 8.1 CISA Malcolm 6 Vulnerabilities Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (S...
Eclipse Foundation Eclipse Milo
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following versions of Eclipse Foundation Eclipse Milo are affected: Eclipse Milo >=0.6.0|<=1.1.4 (CVE-2026-63252, CVE-2026-63248, CVE-2026-60007) Eclipse Milo >=1.0...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operationa...
Optimizely - Degraded Snippet Publishing Performance
Oct 15, 10:35 UTC Investigating - We are investigating an issue causing delays when publishing experiments and other changes. Customers may see deployments remain in an "Uploading to CDN" state longer than expected before becoming available. Existing experiences continue to serve normally. Our engineering team is actively investigating the cause and working to restore normal publishing times.
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026. "This resulted from compromising the GitHub accounts of about 1,900 users. It attempted to extract 3,174 secrets from public repositories' CI," security researchers Gaetan
Box - [Major] Issue with Box Drive
Oct 15, 01:30 PDT Investigating - We are investigating latency with syncing from the Box Web Application to Box Applications: Box DriveSome Users may see delayed updates synchronizing items from the Box Web App to Box Drive desktop clients.
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface. "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS software enables an
Xero - Global: Subscriptions - some customers are unable to purchase and management subscriptions
Oct 15, 05:43 UTC Investigating - We are aware that some customers trying to purchase and management subscriptions in Xero are experiencing an error. Our team is investigating this with urgency.
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
submitted by /u/Doug24 [link] [comments]
Zoom - Zoom Workforce Management Update: October 15, 2026 (No Operational Impact)
Oct 14, 17:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 13, 06:40 PDT Scheduled - We will be providing an update to Zoom Workforce Management. Please refer to https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0068337 for more details. This update includes bulk CSV import and export capabilities for user management.There is no operational impact. All services will be available during this scheduled update.
[CISA KEV] CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
Product: Multiple Products by Atlassian Description: Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions. Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Plaid - Elevated API errors
Status: MonitoringThis issue has been mitigated. We are closely monitoring our systems as we recover.
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes any command an attacker sends via a web request, with the rights of the web server account. The flaw
Zoom - Service degradation affected Zoom AI Companion in US region
Oct 14, 10:19 PDT Resolved - This incident has been resolved and the affected services have been restored. Oct 14, 10:03 PDT Monitoring - On 10/14/2026, Between 12:10 UTC to 12:34 UTC, users may have experienced issues with Zoom AI Companion in US region.This incident has been resolved and the affected services have been restored.
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix), and Iron Man System. "Since January 2026, the threat actors behind these kits have been responsible for
Monday.com - Identified issues with AI operations in the monday platform (Service Degradation for some models)
Oct 14, 14:53 UTC Resolved - This incident has been resolved. Oct 14, 14:52 UTC Monitoring - A fix has been implemented and we are monitoring the results. Oct 14, 14:06 UTC Identified - Our team has identified the root cause of the issue and is working to resume regular service usage. We will continue to provide updates on their progress.
CircleCI - Delays starting macOS jobs that use Xcode 26.6.0
Oct 14, 14:47 UTC Investigating - Since approximately 14:00 UTC, customers running macOS jobs that use Xcode 26.6.0 on the M4 Pro large resource class are experiencing delays starting jobs. Wait times have reached 30 minutes or more. Thank you for your patience while our engineers investigate. We will provide another update by 15:30 UTC.
Heap - User property data delayed in Heap connect syncs (US customers only)
Oct 14, 06:03 PDT Investigating - We are investigating delays in user property updates appearing in the Heap connect syncs for some customers. Our engineering team is working to identify the cause and restore normal processing. Data continues to be collected and no data has been lost.
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CVE-2026-105133 Ahsay AhsayCBS Improper Authentication Vulnerability CVE-2026-105134 Ahsay AhsayCBS Command In...
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said. Its researchers built the attack in six days by directing AI agents running OpenAI's publicly available GPT-5.6 Sol model. Google has since confirmed all three bugs, fixed them, and paid XBOW its top $
Zoom - Service Degradation Affected Sandbox Creation in ZoomMate
Oct 14, 02:44 PDT Resolved - This incident has been resolved and the affected services have been restored. Oct 14, 02:39 PDT Monitoring - On 10/14/2026, Between 05:35 UTC to 06:16 UTC, the users may have experienced issue with creating sandbox in ZoomMate.This incident has been resolved and the affected services have been restored.
GCP - RESOLVED: Google Cloud Storage (GCS) customers experienced elevated latencies and error rates when performing upload or write operations.
Incident began at 2026-10-08 04:00 and ended at 2026-10-09 09:46 (all times are US/Pacific).Incident Report Date/Time of the Issue (All time US/Pacific) Incident First Occurrence Incident Start: 08 October 2026 04:00 Incident End: 08 October 2026 16:30 Duration: 12 hours, 30 minutes Incident Recurrence Recurrence Start: 09 October 2026 04:05 Recurrence End: 09 October 2026 09:46 Duration: 5 hours, 41 minutes Total Duration: 18 hours, 11 minutes Summary On Thursday, 08 October 2026, Google Cloud...
Sentry - Ingestion Halted for EAP data in EU
Oct 14, 05:46 UTC Identified - In the EU we've identified an issue with ingestion into EAP and are working towards a fix.
Xero - Global: Xero - Some customers may be experiencing some errors in product and inability to view invoice PDFs.
Oct 14, 04:33 UTC Resolved - Our team has resolved the issue impacting customers trying to navigate in Xero and perform tasks. We apologise for any inconvenience this has caused. This related to a network connectivity issue and our team has restored service. Oct 14, 04:14 UTC Monitoring - Our team has implemented a fix and we are currently monitoring the results. Oct 14, 04:08 UTC Investigating - We are aware some customers trying to navigate in Xero and generate invoices and PDFs are exper...
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to covertly record sensitive conversations. Abdulrahman Alfozan, 35, has been charged with using or endeavoring to use an electronic, mechanical, or other device to intercept oral communications. He was arrested by
Slack - Incident: Single Sign On errors
Some users may have experienced trouble logging into Slack. We identified the trigger and resolved the issue and restored access. We’re sorry for the disruption.
Zoom - Service Degradation Affecting Zoom Clips
Oct 13, 17:20 PDT Investigating - We are currently investigating a service degradation with Zoom Clips affecting a subset of users.Our team is actively working to identify the impact and root cause. We will provide an update as soon as more information becomes available.We appreciate your patience as we work to resolve this issue.
[CISA KEV] CVE-2026-0322: Palo Alto Networks PAN-OS Code Injection Vulnerability
Product: PAN-OS by Palo Alto Networks Description: Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Dropbox - Scheduled maintenance
THIS IS A SCHEDULED EVENT Oct 14, 00:00 - 01:00 UTC Oct 13, 22:45 UTC Scheduled - Dropbox will be performing routine maintenance on October 13, 2026 starting at 5:00 PM (Pacific). You may not be able to access Dropbox for a short period of time, but we’ll have things back up and running as soon as possible to minimize disruption to you.
GitHub - [Retroactive] Actions workflow run logs delayed
Oct 13, 20:30 UTC Resolved - On October 13, around 20:42 UTC, an infrastructure failure caused GitHub Actions to have delays showing logs for workflow runs. No logs were lost and the issue has now been resolved and log processing has caught up.The actual workflows producing the logs were not impacted and ran normally and no run delays or check delays occurred.
Amplitude - Degraded Performance- Funnel charts renders as white text on a white/near-white background in light theme
Oct 13, 11:53 PDT Resolved - Since 2026-10-13 00:28 PT (07:28 UTC), we have identified an issue affecting Funnel charts in light theme where the conversion percentage data label displays as unreadable white text on a white background.This issue has been resolved as of 2026-10-13 01:24 PT (08:24 UTC). The conversion percentage data label on Funnel charts now displays correctly in light theme. The underlying data and calculations are not affected, and no data loss has occurred.
GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) - Help Net Security
October 12–13 | Cybersecurity | CRITICAL GitLab released security updates addressing CVE-2026-97229, a vulnerability with the maximum CVSS severity score of 10.0. The vulnerability affects GitLab's CI/CD regular-expression compiler. Under certain conditions, an unauthenticated attacker could submit specially crafted configuration data that results in arbitrary code execution on a vulnerable ...
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from Anthropic. The frontier AI lab said small AI models could form autonomous, self-propagating worm botnets that are "challenging to shut down," since "there's no centralized point to shut off."
Optimizely - Elevated GraphQL API errors and delayed data ingestion in ODP – US region
Oct 13, 18:10 UTC Resolved - Between 15:05 and 16:10 UTC on October 13, 2026, Data Platform customers in the US region experienced delayed data ingestion and elevated error rates on the GraphQL API. From about 15:20 to 16:07 UTC, most GraphQL API requests failed with HTTP 5xx errors or timeouts. Ingestion of new data was delayed by up to about 65 minutes. All delayed data accepted during the incident was processed by 16:10 UTC.Our engineers applied infrastructure changes that resolved the issue...
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature that converts a personal account into an organization, Docker said in a security advisory on October 12.
DigitalOcean - App Platform Deployments
Oct 13, 17:09 UTC Resolved - Between 04:34 and 12:15 UTC, customers experienced service interruptions affecting App Platform deployment operations. During this window, customers may have been unable to deploy new applications or scale existing deployments. Applications already running prior to the incident were unaffected and continued to operate normally.The disruption was caused by a software update that prevented application containers from starting on newly provisioned infrastructure nodes....
HashiCorp - Terraform Runs Failing
Status: ResolvedOur Engineering team has resolved the issue. These systems should now be operating normally. If you continue to experience any problems, please open a ticket with our support team.Affected components HCP Terraform (Operational)
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user's package without having to steal their credentials. "Your configuration becomes validated and exempt from expiry after its first successful publish," the Microsoft-owned subsidiary
Snowflake - INC20000277
Oct 13, 15:53 UTC Investigating - Current status: We're investigating an issue with Snowflake Data Cloud. We'll provide an update within 1 hour.Customer experience: Customers hosted in the specified regions may be unable to execute scheduled or manual tasks. Tasks may be stuck in a pending state or fail to initiate, and affected users may see an "Unexpected exception during task dispatch" message or similar error messages.
We Let AI Fuzz Adobe Reader for a Week. It Found a Critical Zero-Day CVE-2026-81983
submitted by /u/NewResearch1337 [link] [comments]
Figma - Figma agent and Figma Make increased errors rates.
Oct 13, 10:52 UTC Resolved - The issue is now resolved fully. Some users saw elevated error rates in Figma's AI features, including AI chat and Figma Make. Affected requests may have failed or needed a retry. We identified an issue with one of our providers and moved traffic to an alternate. Error rates have fully recovered. We are continuing to work with the provider to prevent this from happening again. We apologize for the disruption. Oct 13, 10:32 UTC Monitoring - A fix has been implement...
Zoom - Service degradation affecting Zoom Meeting API in US region
Oct 13, 02:32 PDT Monitoring - On 10/13/2026, Between 04:23 UTC to 09:14 UTC, Subset of users may have experienced issues with Zoom Meeting API in US region.This incident has been resolved and the affected services have been restored.
Plaid - Delayed Transactions Update Webhooks
Status: ResolvedThis incident has been resolved and the backlog of delayed transaction updates has cleared. Some customers may have observed elevated SYNC_UPDATES_AVAILABLE webhook volume while processing caught up. We did not observe an abnormal increase in webhook delivery failures, and no customer action is required.Affected components API - Production (Operational)
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD
Xero - Global: Xero Partner Hub - Some slowness or unable to access pages in Partner Hub
Oct 13, 00:20 UTC Resolved - We've become aware of a brief issue in Xero Partner Hub where customers in AU and NZ were experiencing slowness and errors. Our Product Team are investigating what caused this and the Xero Partner Hub is operational now.
Supabase - Realtime latency
Status: InvestigatingWe are experiencing increased latency with Realtime and are actively investigating.Affected components Realtime (Degraded performance)
GitHub adds authenticated pusher identities and a committer-match rule
GitHub's October 12 Changelog release adds a durable, authenticated pusher identity to every commit, separate from the author and committer fields that the pushing client can supply. It also adds a new ruleset condition called "Committer must match pusher", which can block pushes when the committer metadata does not match a verified email address of the authenticated pusher. The practical value is...
Supabase - Edge Function Degradation
Status: IdentifiedWe are experiencing significant degraded performance across edge functions, mainly affecting deploy and retrieving function body. We have identified the root cause and are working on the fix now.Affected components us-west-1 (Degraded performance) ap-east-1 (Degraded performance) ap-southeast-1 (Degraded performance) eu-central-1 (Degraded performance) sa-east-1 (Degraded performance) ap-northeast-1 (Degraded performance) us-east-2 (Degraded performance) eu...
Supabase - Log ingestion impaired
Status: InvestigatingLog ingestion is currently impaired. Logs may be delayed or unavailable. We are investigating the issue and working to restore normal functionality. We will provide further updates as more information becomes available.Affected components Logging & Observability (Degraded performance)
LastPass - LastPass - Issues accessing Admin Console
[Resolved] We have confirmed that the issue has been resolved. We will conduct an internal review of this issue to help prevent or minimize future recurrence. Impacted: LastPass - Australia, LastPass - United States, LastPass - Europe, +1 more
What can be used to stop / prevent the email auto-forward "persistence"? (trying to learn from Football Leaks)
I am trying to use the example that led to the huge scandal Football Leaks to prevent such issues at my workplace. What happened there (from Football leaks): Send a fake email. To the law firm, it looked like the tax office. To the investment fund, a Dropbox share sent from the real (hacked) account of a football director. Normal stuff, from people you’d trust. Steal the password. The link opened...
Vercel - Increased build and deployment failures
Oct 12, 13:35 UTC Investigating - We've identified an issue where some customers may experience build failures or deployments that fail to start. We are investigating this issue. We will provide additional updates as they become available.
GitHub - Incident with Actions, Pull Requests and Issues
Oct 12, 12:57 UTC Update - We have a mitigation in progress and are monitoring for recovery. Users may also experience delayed web notifications as we mitigate. Oct 12, 12:33 UTC Update - Users may experience issues loading the Actions tab UI, interacting with the Checks API, queueing new Actions runs, creating and updating issues, and requesting PR reviews, including via REST and GraphQL APIs. Oct 12, 12:21 UTC Investigating - We are investigating reports of degraded performance for Action...
Zoom - Service degradation affecting Zoom AI Companion in US region
Oct 12, 04:20 PDT Resolved - This incident has been resolved and the affected services have been restored. Oct 12, 04:09 PDT Monitoring - On 10/12/2026, Between 09:11 UTC to 09:51 UTC, Users may have experienced issues with Zoom AI Companion in US region.This incident has been resolved and the affected services have been restored.
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings together commodity offensive tools like Cobalt Strike with an AI orchestration layer powered by Anthropic's Claude Code, has been attributed
Zoom - Network Maintenance in SJC Datacenter: October 11, 2026
Oct 11, 22:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Aug 31, 09:17 PDT Scheduled - Zoom will perform service maintenance at SJC Datacenter. During the maintenance window, Users may experience an impact for a brief amount of time for services mentioned.
DigitalOcean - DNS Resolution for Managed Kubernetes
Oct 11, 22:54 UTC Monitoring - Our Engineering team has implemented a fix to address the intermittent external DNS lookup failures affecting Managed Kubernetes clusters in multiple regions. We are currently monitoring the results to ensure the issue is fully resolved.We will provide another update as soon as the issue is confirmed to be resolved. Oct 11, 22:01 UTC Investigating - Our Engineering team is investigating an issue causing intermittent external DNS lookup failures for Managed Kuber...
Zoom - Service Degradation Affecting Zoom Scheduler.
Oct 11, 15:29 PDT Investigating - We are currently investigating a service degradation with Zoom Scheduler affecting a subset of users.Our team is actively working to identify the impact and root cause. We will provide an update as soon as more information becomes available.We appreciate your patience as we work to resolve this issue.
CircleCI - Infrastructure Maintenance
Oct 11, 17:40 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 11, 17:37 UTC Scheduled - We are continuing to perform maintenance on our infrastructure. This should run October 11, 2026, from 17:30 UTC to 19:30 UTC. While we expect the impact to be minimal during this window, pipelines, workflows, jobs and notifications may briefly experience interruptions, including delays or failures in workflows and jobs starting. We will provide a...