AI Security Digest
Aggregated ecosystem risk analysis
Vendor Watchlist
Tracking 0 critical integrations
Threat Stream Feed
Real-time security logs and system alerts
Cloudflare - LAX (Los Angeles) on 2026-09-16
Sep 16, 07:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 16, 06:01 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 15, 19:40 UTCScheduled - We will be performing scheduled maintenance in LAX (Los Angeles) datacenter on 2026-09-16 between 07:00 and 15:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in ...
Cloudflare - PHX (Phoenix) on 2026-09-16
Sep 16, 06:30 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 16, 05:30 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 15, 08:10 UTCScheduled - We will be performing scheduled maintenance in PHX (Phoenix) datacenter on 2026-09-16 between 06:30 and 14:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...
Cloudflare - IAD (Ashburn) on 2026-09-16
Sep 16, 06:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 16, 05:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 14, 06:50 UTCScheduled - We will be performing scheduled maintenance in IAD (Ashburn) datacenter on 2026-09-16 between 06:00 and 10:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...
Zoom - Service Degradation Affecting Zoom Phone Outbound Calls in China Region
Sep 15, 21:35 PDT Resolved - This incident has been resolved and the affected services have been restored. Sep 15, 21:29 PDT Monitoring - The issue affecting Zoom Phone outbound calls has been successfully resolved. Our team will continue to monitor the situation closely and keep you informed of any further developments. Sep 15, 21:15 PDT Identified - We have successfully identified the root cause affecting Zoom Phone outbound calls for users with phone numbers that have the +8621 prefix in...
Cloudflare - Network Performance Issues in Los Angeles
Sep 16, 02:03 UTCInvestigating - Cloudflare is investigating an increased level of HTTP 5XX errors. We are working to analyse and mitigate this problem. More updates to follow shortly.
New Relic - Data Irregularities for EU Region
Sep 16, 00:14 UTC Resolved - Between 23:06 UTC and 23:16 UTC, some customers in the EU region may have experienced errors when sending metric timeslice data to New Relic, issues in viewing metric timeslice data in real time, and delayed or missing alert notifications related to real time data. Impacted data may not be recoverable.
Supabase - Scheduled Platform Maintenance - 15th September, 2026
Sep 15, 21:45 UTC Completed - The scheduled maintenance has been completed. Sep 15, 21:42 UTC Verifying - Verification is underway for the maintenance items. Sep 15, 21:20 UTC Update - Scheduled maintenance is currently in progress. We will provide updates as necessary.During the maintenance, support ticket creation will be suspended. Sep 15, 21:15 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 7, 15:18 UTC Scheduled - We wil...
Cloudflare - KHI (Karachi) on 2026-09-15
Sep 15, 21:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 15, 20:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 14, 09:30 UTCScheduled - We will be performing scheduled maintenance in KHI (Karachi) datacenter on 2026-09-15 between 21:00 and 23:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...
GitHub - Disruption with some GitHub services
Sep 15, 19:48 UTC Monitoring - The degradation has been mitigated. We are monitoring to ensure stability. Sep 15, 19:11 UTC Investigating - We are investigating reports of impacted performance for some GitHub services.
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has used lures that impersonate a dozen Brazilian banks and install a malicious browser extension on Google Chrome and
Zoom - Service Degradation Affecting Zoom Whiteboard
Sep 15, 11:36 PDT Resolved - This incident has been resolved. Sep 15, 11:22 PDT Monitoring - On 09/15/2026, between 15:15 UTC to 15:38 UTC, users may have experienced Zoom whiteboard degradation in the US region. The issue has been successfully resolved. Our team will continue to monitor the situation closely and keep you informed of any further developments.
Plaid - Transaction Updates Delayed
Status: InvestigatingWe are currently experiencing delays in Transactions updates. We are actively investigating and working to mitigate this issue.
Plaid - Elevated Item add errors
Status: InvestigatingWe are currently experiencing elevated error rates for Item adds. We are actively investigating and working to mitigate this issue.Affected components API - Production (Degraded performance)
CircleCI - Customers may experience delays in UI updates
Sep 15, 14:42 UTC Investigating - We are currently seeing a delay in pipeline data surfacing in the UI.
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development servers that's designed to steal cloud credentials, configurations from Amazon Web Services (AWS) and Microsoft Azure instances, and infrastructure state files, per F5 Labs. The
AWS - Service disruption: Increased Error Rates
We are providing an update on the disruption affecting the Middle East (UAE) (me-central-1) Region. After a thorough assessment, we have determined that we are unable to restore access to the resources and data hosted exclusively in the mec1-az2 Availability Zone. We continue to work on recovering regional resources, as well as zonal resources hosted in the other affected Availability Zones (mec1-az1 and mec1-az3). Since the disruption began in March, most customers have been able to re-establi...
AWS - Service disruption: Increased Error Rates
We are providing an update on the disruption affecting the Middle East (Bahrain) (me-south-1) Region. The damage to our infrastructure spanned multiple Availability Zones and exceeded what our regional and multi-AZ services are designed to withstand. After a thorough assessment, we have determined that we are unable to restore access to the resources and data hosted exclusively in this Region. When the first Availability Zone was damaged in March, we began recommending that customers migrate th...
GitHub - Disruption with some GitHub services
Sep 15, 09:48 UTC Monitoring - We are investigating degraded availability for Claude Fable 5.1, affecting some Copilot products and integrated development environments. The issue is caused by a problem with our upstream model provider. Customers can use another model or select Auto while we investigate. Sep 15, 09:47 UTC Investigating - We are investigating reports of impacted performance for some GitHub services.
Cloudflare - PDX (Portland) on 2026-09-15
Sep 15, 08:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 10, 03:40 UTCScheduled - We will be performing scheduled maintenance in PDX (Portland) datacenter on 2026-09-15 between 09:00 and 14:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting th...
Cloudflare - DFW (Dallas) on 2026-09-15
Sep 15, 08:30 UTCScheduled - We will be performing scheduled maintenance in DFW (Dallas) datacenter on 2026-09-15 between 09:00 and 11:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network inter...
Wix - Multiple Issues with Wix Services in European Region
Sep 15, 08:56 UTC Monitoring - A fix has been implemented and we are monitoring the results. Sep 15, 08:51 UTC Identified - The issue has been identified and a fix is being implemented. Sep 15, 08:35 UTC Investigating - We are aware that users are experiencing multiple issues with Wix Services and we are currently investigating it. Further updates to follow shortly.
Cloudflare - Network latency affecting Singapore
Sep 15, 07:35 UTCResolved - This incident has been resolved.Sep 15, 07:16 UTCMonitoring - A fix has been implemented and we are monitoring the results.Sep 15, 07:15 UTCInvestigating - Cloudflare is investigating issues with network performance in Singapore. We are working to analyse and mitigate this problem. More updates to follow shortly.
Cloudflare - LAX (Los Angeles) on 2026-09-15
Sep 15, 07:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 15, 06:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 13, 17:01 UTCScheduled - We will be performing scheduled maintenance in LAX (Los Angeles) datacenter on 2026-09-15 between 07:00 and 15:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in ...
Cloudflare - PHX (Phoenix) on 2026-09-15
Sep 15, 06:30 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 15, 05:30 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 13, 21:51 UTCScheduled - We will be performing scheduled maintenance in PHX (Phoenix) datacenter on 2026-09-15 between 06:30 and 14:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...
Cloudflare - ORD (Chicago) on 2026-09-15
Sep 15, 06:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 15, 05:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 11, 13:51 UTCScheduled - We will be performing scheduled maintenance in ORD (Chicago) datacenter on 2026-09-15 between 06:00 and 12:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...
Cloudflare - GRU (São Paulo) on 2026-09-15
Sep 15, 05:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 9, 14:10 UTCScheduled - We will be performing scheduled maintenance in GRU (São Paulo) datacenter on 2026-09-15 between 06:00 and 14:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting t...
Cloudflare - EWR (Newark) on 2026-09-15
Sep 15, 04:01 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 11, 04:40 UTCScheduled - We will be performing scheduled maintenance in EWR (Newark) datacenter on 2026-09-15 between 05:00 and 10:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this...
Xero - Global: Syft Native Budget and Cashflow Manager - Error when accessing Native Budget and Cashflow Manager
Sep 15, 03:45 UTC Resolved - Our team has resolved the issue impacting customers trying to access Native Budget and Cashflow Manager. We apologise for any inconvenience this has caused. Sep 15, 03:40 UTC Monitoring - Our team has implemented a fix and we are currently monitoring the results. Sep 15, 03:38 UTC Update - We are continuing to investigate this issue. Sep 15, 03:29 UTC Investigating - We are aware of an issue where customers trying to access Native Budget and Cashflow Manager i...
Akamai - Performance issues in HTTPS edge delivery network
Sep 15, 03:21 UTC Monitoring - We became aware of an issue with the HTTPS edge delivery network related to performance issues. The issue lasted between 00:45 UTC and 00:57 UTC on 15 September 2026. We have implemented a fix for this issue, which we believe may have caused the issue; based on current observations, the service is resuming normal operations. Customers and partners can find more details on the Akamai Community: https://community.akamai.com/customers/s/feed/0D5a700001TpkinCAB. We wi...
Cybersecurity professionals: What problem still exists between detection and response?
I’m researching a problem in modern security operations and I’d genuinely like feedback from people who work in cybersecurity. Most organizations already use multiple security tools such as EDR, SIEM, XDR, threat intelligence, vulnerability management, IAM, SOAR, etc. But I’m interested in what happens across these tools. For example, an EDR detects suspicious activity, the SIEM has related logs, ...
Cloudflare - Load Balancing Analytics and Notification Delays
Sep 14, 23:03 UTCInvestigating - Cloudflare is investigating delays affecting analytics and notifications for Load Balancing health monitoring events. Load Balancing steering remains fully operational and is not impacted. We are working to resolve the issue.
Cloudflare - Some Replicate models are failing to start
Sep 14, 22:25 UTCInvestigating - We are investigating an issue which is preventing Replicate models from failing to start new replicas.
Cloudflare - Increased 5xx errors and latency for Los Angeles (LAX) Sept 14 22:15 - Sept 14 23:10 UTC
Sep 14, 22:00 UTCResolved - We’re receiving reports of network related issues/congestion in Los Angeles between Sept 14 22:15 - Sept 14 23:10 UTC. This issue is now resolved.
ActiveCampaign - Bulk Edit of contacts is not applying filters.
Sep 14, 16:55 CDT Resolved - This incident has been resolved. Sep 14, 16:29 CDT Identified - Filters are not applying when bulk editing contacts. Customers are advised not to use Bulk Edit until a fix is deployed.
Cloudflare - Cloudflare Queues issues
Sep 14, 20:22 UTCInvestigating - Cloudflare is aware of investigating issues with our Cloudflare Queues product.
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking online (via Zoom) at a League of Women Voters event on Tuesday, September 22, 2026 at 5 PM ET. I’m speaking at CanSecWest 2026 in Vancouver, Canada. The conference runs September 30–October 1, 2026; the time of my talk is TBD. I’m giving a talk on “Free Speech and the Preservation of Democracy” at Bentley University in...
GitHub - Actions Larger Runner Jobs for some customers may be slow to start
Sep 14, 18:40 UTC Investigating - We are investigating reports of impacted performance for some GitHub services.
Using AI for Weapons Development
Last week, Anthropic released a long and detailed document describing current misuses of their Claude models. I’m still reading it, but I wanted to flag this: We identified a cell of threat actors based in northern Yemen running three weapons development programs: a guided rocket that used a commodity phone-class flight computer with final-phase homing guidance; a multi-stage ballistic missile wit...
Xero - UK: Delay with processing HMRC connected services (CIS, Corporate Tax, Personal Tax, Partnership Tax, Payroll)
Sep 14, 15:53 UTC Identified - HMRC have let us know that there is an ongoing investigation into the delayed responses from their services which is impacting UK customers using CIS, Personal tax, Partnership Tax, Payroll and Corporation tax. Sep 14, 15:08 UTC Investigating - We're aware that UK customers using CIS, Personal tax, Partnership Tax, Payroll and Corporation tax may experience a delay in filings processing. This is due to our systems receiving errors from HMRC's services. We have c...
CircleCI - Increased wait times for macOS jobs
Sep 14, 11:59 UTC Investigating - Due to increased network errors and latencies we are seeing increased wait times for macOS jobs. We are investigating this with our macOS hosting provider.
Microsoft’s Patching
Once a month, Microsoft pushes a security update to all Windows users. Tomorrow’s is a new record: Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high critical-severity threshold. It was only two months ago that Microsoft patched a then-record 570 vulnerabilities. Then, last month, Microsoft patched some 620 of them...
Cloudflare - DFW (Dallas) on 2026-09-14
Sep 14, 08:30 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 14, 08:21 UTCScheduled - We will be performing scheduled maintenance in DFW (Dallas) datacenter on 2026-09-14 between 08:30 and 11:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, pl...
Cloudflare - ATL (Atlanta) on 2026-09-14
Sep 14, 06:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 7, 22:30 UTCScheduled - We will be performing scheduled maintenance in ATL (Atlanta) datacenter on 2026-09-14 between 07:00 and 22:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting thi...
Cloudflare - IAD (Ashburn) on 2026-09-14
Sep 14, 06:01 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 14, 05:01 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 10, 09:50 UTCScheduled - We will be performing scheduled maintenance in IAD (Ashburn) datacenter on 2026-09-14 between 06:00 and 10:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...
Cloudflare - EWR (Newark) on 2026-09-14
Sep 14, 06:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 14, 05:01 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 9, 14:30 UTCScheduled - We will be performing scheduled maintenance in EWR (Newark) datacenter on 2026-09-14 between 06:00 and 13:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the a...
Snowflake - INC20000217
Sep 14, 04:48 UTC Investigating - Current status: We're investigating an issue with Snowflake Data Cloud. We'll provide an update within 1 hour.Customer experience: Customers in the affected regions may experience performance degradation or issues logging into Snowflake, including delayed sign-ins, query execution failures, and errors managing data.ETA: An ETA is not yet available. We'll provide one as soon as possible. In the meantime, we recommend that affected customers using replication ini...
Sumo Logic - Problem with Cloud SIEM Processing in North America 1 (US1)
Sep 14, 01:50 UTC Resolved - We are no longer seeing issues with Cloud SIEM Processing and normal operation has been restored at this time. Sep 14, 01:40 UTC Monitoring - We have implemented a fix for the issue affecting Cloud SIEM Processing. Users may experience delayed Signal Generation. Alerts based on signals may not dispatch to the user. We are currently monitoring the results. Sep 14, 01:20 UTC Investigating - We are currently investigating reports of problems with Cloud SIEM Proces...
Xero - ATO services may be unavailable
Sep 13, 23:46 UTC Identified - ATO is experiencing an outage. Our team is working with the ATO to resolve the issue as soon as possible. Please check our Xero Status page for updates and try again later.
GitHub - Incident with several GitHub Services
Sep 13, 09:36 UTC Update - We're seeing increased database replication delays on collab which is causing increased error rates in authorization endpoints and follow-on increased error rates across the system - we are investigating Sep 13, 09:25 UTC Update - Actions is experiencing degraded performance. We are continuing to investigate. Sep 13, 09:16 UTC Investigating - We are investigating reports of degraded availability for API Requests, Issues, Pages and Pull Requests
Elastic Cloud - Delayed Metrics in Cloud Console - GCP us-east4
Sep 12, 23:21 UTC Investigating - We are investigating metrics delays in the console.
Slack - Incident: Some customers experiencing blurry image previews and download issues
We've identified a likely technical trigger connected to a recent image-rendering service change.Current status and actions being taken: We have identified a likely technical trigger — a recent thumbnail-sharpening change to the image-rendering service. We're working to validate this, and are evaluating the rollback of the change as a possible fix.Estimated time to resolution: We are still confirming the technical trigger before a fix can be scoped.Scope: Affects a subset of customers across des...
OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
The "major malicious attack" that targeted RubyGems in May 2026 was the work of a swarm of OpenAI agents, according to a new report published by researchers Spencer Kitts, Thomas Larsen, and Sydney Von Arx. On May 12, Maciej Mensfeld, senior product manager for software supply chain security at Mend.io, disclosed details of a coordinated cyber attack that targeted the package manager for the
Cloudflare - Issues creating and updating Cloud Connector Rules
Sep 12, 08:11 UTCIdentified - The issue has been identified and a fix is being implemented.Sep 12, 08:06 UTCInvestigating - Cloudflare is investigating failures in updating and creating Cloud Connector Rules. We are working to mitigate this problem. More updates to follow shortly.
Xero - Inland Revenue (NZ) Scheduled Maintenance 12th September 2026
THIS IS A SCHEDULED EVENT Sep 12, 01:00 - 10:30 UTC Sep 6, 20:54 UTC Scheduled - The Inland Revenue Department (IRD) is completing planned maintenance from 1pm to 10.30pm on Saturday 12 September 2026, NZST.During this time, customers will be unable to file GST returns, income tax returns or payday filings to IRD from Xero. You can complete filings to IRD as normal from 10.31pm Saturday 12 September 2026, NZST. Please note, you can continue to run and view GST, income tax returns and payruns d...
Cloudflare - Cloudflare Tunnel Availability Issues
Sep 11, 21:55 UTCInvestigating - Cloudflare is investigating issues with Cloudflare Tunnel. More updates to follow shortly.
Plaid - Maintenance: Chase Scheduled Maintenance
Status: ScheduledChase is planning maintenance from 12/09 21:00 UTC to 13/09 22:00 UTC. During this window, we expect intermittent errors for Item adds, API calls, and scheduled updates for Chase items.Affected components API - Production (Under maintenance)
Cloudflare - Network Performance Issues with Taiwan datacenter (TPE)
Sep 11, 19:35 UTCInvestigating - Cloudflare is investigating issues with Network Performance in Taiwan datacenter (TPE) We are working to analyze and mitigate this problem. More updates to follow shortly.
AI-Powered Security
AI-Powered Security AI is built into the SaaS apps you already run: Claude in your workflows, Now Assist inside ServiceNow, Agentforce across Salesforce. AppOmni defends this AI layer with the same SSPM principles that secures the rest of your SaaS environments, powered by AppOmni’s own AI. CHALLENGE AI is everywhere in SaaS, and most security […] The post AI-Powered Security appeared first on App...
Xero - HMRC system maintenance (MTD ITSA)
THIS IS A SCHEDULED EVENT Sep 11, 17:00 UTC - Sep 15, 13:00 UTC Aug 24, 12:24 UTC Scheduled - HMRC is undergoing scheduled system maintenance for the Making Tax Digital for Income Tax service from 17:00 on the 11th September 2026 until 13:00 on Tuesday the 15th September 2026.During this time the service will be unavailable.Please refer to the HMRC website for further information: https://www.gov.uk/government/publications/use-software-to-send-income-tax-updates-service-availability-and-issue...
Supabase - Latency issues resulting in 504 errors
Sep 11, 17:00 UTC Resolved - We observed latency issues over the weekend resulting in 504 errors primarily impacting customers on the Free tier. The incident has been resolved.
Plaid - Statements API downtime
Status: InvestigatingOur Statements API, /statements/download, is currently experiencing unexpected downtime. We are actively investigating and working to mitigate this issue.
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure. The vulnerability in question is CVE-2026-85706 (CVSS score: 10.0), a path traversal issue in the repository commits API that could allow an unauthenticated user to read arbitrary files from the GitLab server under
Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks
Anthropic on Thursday said it identified and disrupted industrial-scale illicit distillation attacks against Claude from seven labs based in China, including Alibaba, Moonshot, DeepSeek, Z.ai (aka Zhipu), and MiniMax. Knowledge distillation by itself is a legitimate training method. It refers to a machine learning technique where a large, powerful AI model assumes the role of a "teacher" to
Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between December 2025 and August 2026. The threat actors, which the artificial intelligence (AI) company has branded Generative Threat Groups (GTGs), span state-sponsored groups, financially motivated criminals, commercial
Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection
Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve. The operation has been attributed to a cyber espionage group it calls GTG-20006 (where "GTG" stands for Generative Threat Group), which aligns with broader reporting linking the cluster to Midnight
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-85706 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) ...
Sumo Logic - Problem with Cloud SIEM Processing in Australia (AU)
Sep 11, 10:24 UTC Investigating - We are currently investigating reports of problems with Cloud SIEM Processing. Log security records may take longer than normal to become searchable after processing. Users may not receive data when running queries or viewing dashboards that depend on recently collected data and alerts may not dispatch. Users may also experience delayed insights and signal generation on the affected security records. We will provide more information soon.
Cloudflare - DFW (Dallas) on 2026-09-11
Sep 11, 08:15 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 11, 08:10 UTCScheduled - We will be performing scheduled maintenance in DFW (Dallas) datacenter on 2026-09-11 between 08:15 and 11:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, pl...
Snowflake - INC20000213
Sep 11, 07:44 UTC Update - Current status: We're continuing to investigate the issue with Snowflake Data Cloud. We'll provide another update within 30 minutes.Customer experience: Customers hosted in the specified regions may be unable to access or use multiple core Snowflake services and features. Affected users may be unable to sign in, execute queries, or manage data.ETA: An ETA is not yet available. We'll provide one as soon as possible.Incident start time: 05:00 UTC September 11, 2026 Se...
Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors
Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said in a report. Wiz saw the attacks between August 15 and September 8. JFrog had fixed both flaws before then, so only servers that had not been updated were open to them.
Cloudflare - Issues with Workers VPC hostname route resolution on 2026-09-11
Sep 11, 06:22 UTCResolved - An issue prevented Workers VPC from correctly resolving hostname routes for a small subset of accounts between 06:22 and 09:38 UTC on Friday, September 11th, 2026. This problem has been fully resolved, and all services are operating normally. During this timeframe, affected accounts may have experienced connection failures, timeouts, or routing errors when Workers VPC attempted to fetch requests via hostname routes. The issue was strictly limited to hostname route r...
Zoom - Zoom Push Notification Service Release: September, 2026 (No Operational Impact)
Sep 10, 22:30 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 8, 22:55 PDT Scheduled - We will be performing scheduled maintenance to upgrade our Push Notification Service.No operational impact is expected. This maintenance includes the following enhancements and improvements:- Activity center enhancement- Deployment process enhancementAll services are expected to operate normally during the maintenance window.
Cloudflare - ORD (Chicago) on 2026-09-11
Sep 11, 04:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 9, 16:20 UTCScheduled - We will be performing scheduled maintenance in ORD (Chicago) datacenter on 2026-09-11 between 05:00 and 11:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting thi...
Cloudflare - EWR (Newark) on 2026-09-11
Sep 11, 04:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 10, 06:20 UTCScheduled - We will be performing scheduled maintenance in EWR (Newark) datacenter on 2026-09-11 between 05:00 and 10:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this...
Heap - Heap Connect Sync Delays
Sep 10, 20:53 PDT Monitoring - A fix has been implemented and we are monitoring the results. Sep 10, 20:39 PDT Investigating - We are currently experiencing delays for Connect Syncs. Our engineering team is currently working to identify a root cause and implement a solution.We will post an update in 30 minutes.
Cloudflare - SSL Certificate Provisioning Delays for Let's Encrypt
Sep 11, 02:58 UTCIdentified - Let's Encrypt incident is now resolved. Cloudflare managed certificate backlog is still clearing.Sep 11, 02:20 UTCIdentified - Let's Encrypt are seeing SSL certificates provisioning delays. You can read their public status page here: https://letsencrypt.status.io/pages/incident/55957a99e800baa4470002da/6aa35c1d892d7304f2747e01 SSL certificates already in production and other CAs certificate provisioning remains unaffected and are operating normally.
MongoDB Atlas - Atlas is experiencing issues with issuing certificates from Lets Encrypt
Sep 11, 01:28 UTC Investigating - We are currently investigating issues related to certificate issuing failures with Lets Encrypt. Free and Flex cluster provisioning may be delayed.
[CISA KEV] CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
Product: Community Edition and Enterprise Edition by GitLab Description: GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API. Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
GCP - RESOLVED: Multiple products in us-central1-b are experiencing network service degradation.
Incident began at 2026-09-01 07:44 and ended at 2026-09-01 11:52 (all times are US/Pacific).Incident Report Summary On Tuesday, 1 September 2026, some customers in us-central1 experienced network service degradation and instance isolation for a duration of 4 hours and 11 minutes. To our customers whose businesses were impacted during this disruption, we sincerely apologize. This is not the level of quality and reliability we strive to offer you, and we are taking immediate steps to improve the ...
CircleCI - Issues loading pipelines for a small number of projects
Sep 10, 20:26 UTC Resolved - This incident has been resolved. Sep 10, 20:25 UTC Monitoring - A fix has been implemented and we are monitoring the results. Sep 10, 20:25 UTC Identified - A small number of customers may see errors or be unable to load the pipelines page for projects with deprecated-config warnings, when using the classic pipelines view. Customers on the new pipelines view are not affected. We’ve identified the cause and deployed a fix.
Zoom - Service degradation affecting Zoom Meeting summary, and Phone call summary in the US region.
Sep 10, 11:38 PDT Resolved - This incident has been resolved. Sep 10, 11:22 PDT Monitoring - On 09/08/2026, Between 17:57 UTC to 23:49 UTC, A subset of users may have experienced issues with Meeting Summary and Phone Call Summary.This incident has been resolved and the affected services have been restored.
Akamai - Edge Delivery Increased Latency in US East (IAD)
Sep 10, 17:58 UTC Identified - We have identified the cause of the issue and are implementing a fix. We initially mentioned elevated 403 errors in this status page post as an additional symptom of the incident. That was incorrect, and we have removed the reference. Customers and partners can find more details on the Akamai Community: https://community.akamai.com/customers/s/feed/0D5a700001T8d9uCAB. We will provide another update within the next 60 minutes. Sep 10, 17:37 UTC Investigating - We...
Vercel - Elevated error rate on Connect and Passport
Sep 10, 17:42 UTC Investigating - We've identified an issue where some customers may experience increased errors from Connect and Passport. We are currently investigating this issue. We will provide additional updates as they become available.
Zoom - Service degradation affecting subset of live online meeting translation in Canada region.
Sep 10, 09:57 PDT Monitoring - On 09/10/2026, Between 13:10 UTC to 14:10 UTC, Users may have experienced issues with subset of live online meeting translation in Canada region. This incident has been resolved and the affected services have been restored.
Sentry - Ingestion is delayed in US
Sep 10, 16:52 UTC Update - We are continuing to monitor delayed ingestion. Sep 10, 16:13 UTC Investigating - We are investigating degraded ingestion in US.
Cloudflare - Issues Editing Bulk Redirects
Sep 10, 15:59 UTCIdentified - The issue has been identified and a fix is being implemented.Sep 10, 15:41 UTCInvestigating - Cloudflare is aware of and investigating an issue preventing users from adding new redirects to existing Bulk Redirects. Traffic processed by existing Bulk Redirects remains unaffected, and this issue is limited to the configuration of these rules. Further details will be provided as we investigate.
Zoom - Service Degradation Affecting Zoom Phone, Zoom Contact Center and Zoom Meetings in Europe
Sep 10, 08:57 PDT Update - We are continuing to monitor for any further issues. Sep 10, 08:53 PDT Monitoring - On 09/10/2026, Between 14:58 UTC to 15:02 UTC, Subset of users may have experienced issues with Zoom Phone and Zoom Contact Center in Europe. This incident has been resolved and the affected services have been restored.
Supabase - Unresponsive Projects
Sep 10, 15:46 UTC Identified - We have identified why projects are becoming unresponsive and are implementing a mitigation. Sep 10, 15:26 UTC Investigating - We are aware of Nano projects becoming unresponsive after a period of time, typically hours. We are investigating.
Sentry - Sentry.io elevated number of 500 errors
Sep 10, 15:25 UTC Identified - During migration to new control silo region we started to observe increased number of 500 errors. Migration procedure was rolled back.
Segment - SSO Login Issues with the Segment App
Sep 10, 07:28 PDT Investigating - We are actively investigating an issue in which some customers are unable to login to the Segment app via SSO.
Cloudflare - DNS Update Delays
Sep 10, 13:58 UTCInvestigating - Cloudflare is investigating delays in propagation of updates to DNS records. More updates to follow shortly.
HashiCorp - Hashicorp Linux packages GPG key rotation
Status: IdentifiedWe are currently updating documentation and package verification guidance following an ongoing GPG key rotation for all HashiCorp Linux packages. The fingerprint currently displayed on our site is outdated and may not match the active signing key. We are actively updating the published fingerprint information and related documentation. We will provide an update once the corrected fingerprint details are available.Affected components APT Repository (Partial...
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the patches by September 12, 2026. The vulnerabilities are listed below - CVE-2026-20079 (CVSS score: 10.0) - An authentication
Squarespace - Acuity Scheduling: scheduled maintenance
Sep 10, 06:00 EDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 9, 12:42 EDT Scheduled - Acuity Scheduling will be undergoing maintenance on Thursday, Sept 10 from 6-7am US Eastern time. The admin dashboard, client scheduling page, and other functionality will not be available.Data and existing appointments will remain untouched.
Cloudflare - LED (Saint Petersburg) on 2026-09-10
Sep 10, 10:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 10, 09:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 9, 14:00 UTCScheduled - We will be performing scheduled maintenance in LED (Saint Petersburg) datacenter on 2026-09-10 between 10:00 and 17:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-user...
Cloudflare - DEN (Denver) on 2026-09-10
Sep 10, 08:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 8, 14:40 UTCScheduled - We will be performing scheduled maintenance in DEN (Denver) datacenter on 2026-09-10 between 09:00 and 13:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this...
Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key
Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI gateway, the software a company puts between its applications and the model providers it pays for. That key is the gateway's administrator credential. Anyone who holds it can read every
Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6
Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model broke into real third-party systems, marking the latest in a growing list of cases that have raised concerns about the security risks posed by autonomous AI agents. The AI company said the incident dates back to January 2026 and involved an early version of Claude Opus 4.6 that breached "
Cloudflare - LAX (Los Angeles) on 2026-09-10
Sep 10, 07:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 10, 06:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 8, 18:50 UTCScheduled - We will be performing scheduled maintenance in LAX (Los Angeles) datacenter on 2026-09-10 between 07:00 and 15:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in ...
Cloudflare - PHX (Phoenix) on 2026-09-10
Sep 10, 06:30 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 10, 05:30 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 9, 10:00 UTCScheduled - We will be performing scheduled maintenance in PHX (Phoenix) datacenter on 2026-09-10 between 06:30 and 14:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...