AI Security Digest
Aggregated ecosystem risk analysis
Vendor Watchlist
Tracking 0 critical integrations
Threat Stream Feed
Real-time security logs and system alerts
Amplitude - Degraded Performance- Funnel charts renders as white text on a white/near-white background in light theme
Oct 13, 11:53 PDT Resolved - Since 2026-10-13 00:28 PT (07:28 UTC), we have identified an issue affecting Funnel charts in light theme where the conversion percentage data label displays as unreadable white text on a white background.This issue has been resolved as of 2026-10-13 01:24 PT (08:24 UTC). The conversion percentage data label on Funnel charts now displays correctly in light theme. The underlying data and calculations are not affected, and no data loss has occurred.
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
Small artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from Anthropic. The frontier AI lab said small AI models could form autonomous, self-propagating worm botnets that are "challenging to shut down," since "there's no centralized point to shut off."
Optimizely - Elevated GraphQL API errors and delayed data ingestion in ODP – US region
Oct 13, 18:10 UTC Resolved - Between 15:05 and 16:10 UTC on October 13, 2026, Data Platform customers in the US region experienced delayed data ingestion and elevated error rates on the GraphQL API. From about 15:20 to 16:07 UTC, most GraphQL API requests failed with HTTP 5xx errors or timeouts. Ingestion of new data was delayed by up to about 65 minutes. All delayed data accepted during the incident was processed by 16:10 UTC.Our engineers applied infrastructure changes that resolved the issue...
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it. The flaw was in the feature that converts a personal account into an organization, Docker said in a security advisory on October 12.
DigitalOcean - App Platform Deployments
Oct 13, 17:09 UTC Resolved - Between 04:34 and 12:15 UTC, customers experienced service interruptions affecting App Platform deployment operations. During this window, customers may have been unable to deploy new applications or scale existing deployments. Applications already running prior to the incident were unaffected and continued to operate normally.The disruption was caused by a software update that prevented application containers from starting on newly provisioned infrastructure nodes....
HashiCorp - Terraform Runs Failing
Status: ResolvedOur Engineering team has resolved the issue. These systems should now be operating normally. If you continue to experience any problems, please open a ticket with our support team.Affected components HCP Terraform (Operational)
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user's package without having to steal their credentials. "Your configuration becomes validated and exempt from expiry after its first successful publish," the Microsoft-owned subsidiary
Snowflake - INC20000277
Oct 13, 15:53 UTC Investigating - Current status: We're investigating an issue with Snowflake Data Cloud. We'll provide an update within 1 hour.Customer experience: Customers hosted in the specified regions may be unable to execute scheduled or manual tasks. Tasks may be stuck in a pending state or fail to initiate, and affected users may see an "Unexpected exception during task dispatch" message or similar error messages.
We Let AI Fuzz Adobe Reader for a Week. It Found a Critical Zero-Day CVE-2026-81983
submitted by /u/NewResearch1337 [link] [comments]
Figma - Figma agent and Figma Make increased errors rates.
Oct 13, 10:52 UTC Resolved - The issue is now resolved fully. Some users saw elevated error rates in Figma's AI features, including AI chat and Figma Make. Affected requests may have failed or needed a retry. We identified an issue with one of our providers and moved traffic to an alternate. Error rates have fully recovered. We are continuing to work with the provider to prevent this from happening again. We apologize for the disruption. Oct 13, 10:32 UTC Monitoring - A fix has been implement...
Zoom - Service degradation affecting Zoom Meeting API in US region
Oct 13, 02:32 PDT Monitoring - On 10/13/2026, Between 04:23 UTC to 09:14 UTC, Subset of users may have experienced issues with Zoom Meeting API in US region.This incident has been resolved and the affected services have been restored.
Plaid - Delayed Transactions Update Webhooks
Status: ResolvedThis incident has been resolved and the backlog of delayed transaction updates has cleared. Some customers may have observed elevated SYNC_UPDATES_AVAILABLE webhook volume while processing caught up. We did not observe an abnormal increase in webhook delivery failures, and no customer action is required.Affected components API - Production (Operational)
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD
Xero - Global: Xero Partner Hub - Some slowness or unable to access pages in Partner Hub
Oct 13, 00:20 UTC Resolved - We've become aware of a brief issue in Xero Partner Hub where customers in AU and NZ were experiencing slowness and errors. Our Product Team are investigating what caused this and the Xero Partner Hub is operational now.
Supabase - Realtime latency
Status: InvestigatingWe are experiencing increased latency with Realtime and are actively investigating.Affected components Realtime (Degraded performance)
GitHub adds authenticated pusher identities and a committer-match rule
GitHub's October 12 Changelog release adds a durable, authenticated pusher identity to every commit, separate from the author and committer fields that the pushing client can supply. It also adds a new ruleset condition called "Committer must match pusher", which can block pushes when the committer metadata does not match a verified email address of the authenticated pusher. The practical value is...
Supabase - Edge Function Degradation
Status: IdentifiedWe are experiencing significant degraded performance across edge functions, mainly affecting deploy and retrieving function body. We have identified the root cause and are working on the fix now.Affected components us-west-1 (Degraded performance) ap-east-1 (Degraded performance) ap-southeast-1 (Degraded performance) eu-central-1 (Degraded performance) sa-east-1 (Degraded performance) ap-northeast-1 (Degraded performance) us-east-2 (Degraded performance) eu...
Supabase - Log ingestion impaired
Status: InvestigatingLog ingestion is currently impaired. Logs may be delayed or unavailable. We are investigating the issue and working to restore normal functionality. We will provide further updates as more information becomes available.Affected components Logging & Observability (Degraded performance)
What can be used to stop / prevent the email auto-forward "persistence"? (trying to learn from Football Leaks)
I am trying to use the example that led to the huge scandal Football Leaks to prevent such issues at my workplace. What happened there (from Football leaks): Send a fake email. To the law firm, it looked like the tax office. To the investment fund, a Dropbox share sent from the real (hacked) account of a football director. Normal stuff, from people you’d trust. Steal the password. The link opened...
Vercel - Increased build and deployment failures
Oct 12, 13:35 UTC Investigating - We've identified an issue where some customers may experience build failures or deployments that fail to start. We are investigating this issue. We will provide additional updates as they become available.
GitHub - Incident with Actions, Pull Requests and Issues
Oct 12, 12:57 UTC Update - We have a mitigation in progress and are monitoring for recovery. Users may also experience delayed web notifications as we mitigate. Oct 12, 12:33 UTC Update - Users may experience issues loading the Actions tab UI, interacting with the Checks API, queueing new Actions runs, creating and updating issues, and requesting PR reviews, including via REST and GraphQL APIs. Oct 12, 12:21 UTC Investigating - We are investigating reports of degraded performance for Action...
Zoom - Service degradation affecting Zoom AI Companion in US region
Oct 12, 04:20 PDT Resolved - This incident has been resolved and the affected services have been restored. Oct 12, 04:09 PDT Monitoring - On 10/12/2026, Between 09:11 UTC to 09:51 UTC, Users may have experienced issues with Zoom AI Companion in US region.This incident has been resolved and the affected services have been restored.
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings together commodity offensive tools like Cobalt Strike with an AI orchestration layer powered by Anthropic's Claude Code, has been attributed
Zoom - Network Maintenance in SJC Datacenter: October 11, 2026
Oct 11, 22:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Aug 31, 09:17 PDT Scheduled - Zoom will perform service maintenance at SJC Datacenter. During the maintenance window, Users may experience an impact for a brief amount of time for services mentioned.
DigitalOcean - DNS Resolution for Managed Kubernetes
Oct 11, 22:54 UTC Monitoring - Our Engineering team has implemented a fix to address the intermittent external DNS lookup failures affecting Managed Kubernetes clusters in multiple regions. We are currently monitoring the results to ensure the issue is fully resolved.We will provide another update as soon as the issue is confirmed to be resolved. Oct 11, 22:01 UTC Investigating - Our Engineering team is investigating an issue causing intermittent external DNS lookup failures for Managed Kuber...
Zoom - Service Degradation Affecting Zoom Scheduler.
Oct 11, 15:29 PDT Investigating - We are currently investigating a service degradation with Zoom Scheduler affecting a subset of users.Our team is actively working to identify the impact and root cause. We will provide an update as soon as more information becomes available.We appreciate your patience as we work to resolve this issue.
CircleCI - Infrastructure Maintenance
Oct 11, 17:40 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 11, 17:37 UTC Scheduled - We are continuing to perform maintenance on our infrastructure. This should run October 11, 2026, from 17:30 UTC to 19:30 UTC. While we expect the impact to be minimal during this window, pipelines, workflows, jobs and notifications may briefly experience interruptions, including delays or failures in workflows and jobs starting. We will provide a...
CircleCI - Infrastructure Maintenance
Oct 11, 13:30 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 11, 13:18 UTC Scheduled - We will be performing maintenance on October 11, 2026, from 13:30 UTC to 17:30 UTC. While we expect the impact to be minimal during this window, pipelines, workflows, jobs and notifications may briefly experience interruptions, including delays or failures in workflows and jobs starting. We will provide an update when the maintenance begins and wh...
Plaid - Service Disruption Impacting Chase connections
Status: InvestigatingChase is currently experiencing downtime impacting all channels and data recipients. Item adds and API calls through Plaid are impacted. We will provide an update when Chase has resolved the issue.Affected components Dashboard (Partial outage) API - Production (Partial outage)
Monday.com - Scheduled Maintenance in the EU Region
Oct 11, 06:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 8, 14:54 UTC Scheduled - On Sunday, October 11th at 06:00 UTC, we will be performing scheduled maintenance on our automations and integrations in the EU region. This maintenance is expected to last approximately up to 10 minutes.During this time, automation and integration runs may experience a slight delay. We appreciate your understanding and cooperation during this mai...
GitHub Actions leaking secrets when Miri output is cached
submitted by /u/Beaconamber [link] [comments]
Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws
Anthropic on Friday said it's cutting off live internet access for all its internal evaluations following the discovery of new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior and targeted real websites. The AI company said it identified four broad categories of unintended model actions during evaluations and internal use of Claude - Claude Mythos
Zoom - Service Degradation Affecting File Uploads and Downloads in Zoom Chat
Oct 10, 01:54 PDT Monitoring - On 10/10/2026, Between 06:12 UTC to 07:39 UTC, Users may have experienced issues with file upload and download functionality in Zoom chatThis incident has been resolved and the affected services have been restored.
Vercel - Delays in Drains, Observability, and Workflow in Washington (iad1)
Oct 10, 00:35 UTC Identified - A fix has been implemented and delivery has resumed. Delayed Drains deliveries and Observability data are being processed. We are continuing to monitor. Oct 10, 00:15 UTC Investigating - We've identified an issue where some customers may experience delayed drain delivery, delayed logs, metrics, and traces, and Workflow runs that remain pending in Washington (iad1).We are investigating this issue. We will provide additional updates as they become available.
Sumo Logic - Problem with Metrics Alerting in America Federal (FED)
Oct 9, 23:10 UTC Resolved - We are no longer seeing issues with Metrics Alerting and normal operation has been restored at this time. Oct 9, 23:04 UTC Monitoring - We have implemented a fix for the issue affecting Metrics Alerting. Users relying on metrics-based alerts may have experience delayed delivery of notifications. Normal processing has resumed. We are currently monitoring the results. Oct 9, 23:00 UTC Investigating - We are currently investigating reports of problems with Metric...
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel, the attacker pushed a malicious workflow to 27 repositories starting at 13:20 UTC," StepSecurity
GCP - RESOLVED: Google Cloud Storage customers are experiencing elevated latencies and error rates when performing upload or write operations.
Incident began at 2026-10-08 05:19 and ended at 2026-10-08 16:30 (all times are US/Pacific).Preliminary Incident Report We sincerely apologize for the disruption this incident caused to your business. We know how much you rely on Google Cloud, and we regret the impact on your productivity. We are working to address the root cause and prevent this from occurring in the future. Please note, this information is based on our best knowledge at the time of posting and is subject to change as our inve...
MongoDB Atlas - Issue impacting Atlas Search availability on certain clusters
Oct 9, 16:30 UTC Identified - The issue has been identified and a fix is being implemented. Oct 9, 16:29 UTC Investigating - Ongoing Atlas Search incident known to cause mongot crashes, potential search and vector search outage, impacting a subset of search and vector search users in the Atlas fleet.We have identified the issue and are working on a fix.
Slack - Incident: Slack for iOS closing unexpectedly when opening channels
Users may experience iOS closing unexpectedly when opening channels. We're actively looking in to this, and we'll share another update as soon as we have more information. We appreciate your patience in the meantime.
Zoom - Service Degradation Affecting Zoom Phone and Zoom Contact Center PCI Integration in North America
Oct 9, 07:29 PDT Resolved - This incident has been resolved and the affected services have been restored. Oct 9, 07:17 PDT Monitoring - On 2026-10-09, between 12:04 UTC to 02:10 UTC users might have experienced issue with Zoom Phone and Zoom Contact Center PCI Integration in North America. The issue has been successfully resolved. Our team will continue to monitor the situation closely and keep you informed of any further developments.
Optimizely - Content Graph Performance Degradation
Oct 9, 13:41 UTC Resolved - The cache eviction and webhook delivery issues impacting Content Graph have been resolved. Stale content is no longer being served, and publishing workflows have returned to normal operation. Oct 9, 13:24 UTC Investigating - We have identified an issue affecting Content Graph. When content is published, cache eviction and webhook processing are not completing as expected. As a result, queries to Graph may return outdated content. Our team is actively investigatin...
MongoDB Atlas - Admin Admin API: Intermittent Increase in 5xx errors
Oct 9, 13:11 UTC Investigating - We are seeing elevated HTTP 500 errors affecting the MongoDB Atlas Admin API. Users may experience intermittent failures when making API calls. We are investigating the root cause and will share another update as our investigation continues.
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). "It's an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing," Anthropic said. "Projects that join will receive thorough, periodic security scans by our strongest models at no cost."
CircleCI - Delay in data appearing in UI and API
Oct 9, 11:33 UTC Identified - There is a delay in our data infrastructure causing delays before build data and some notifications become visible. We are working on a mitigation.
Zoom - Zoom Phone India Maintenance (Hyderabad Data Center): October 09, 2026
Oct 9, 04:30 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 16, 09:14 PDT Scheduled - Zoom Phone users registered to the India (Hyderabad) Data Center will be automatically registered in an alternative Data Center (Mumbai) starting at 09th October 2026 04:30 AM PDT (5:00 PM IST on 09th October 2026). During the maintenance window, a brief disconnection may be experienced and notifications may be missed. If you get disconnected, the...
Xero - Global: Xero Partner Hub - Some slowness or unable to access pages in Partner Hub
Oct 9, 02:30 UTC Resolved - We've become aware of a brief issue in Xero Partner Hub where customers in AU and NZ were experiencing slowness and errors. Our Product Team are investigating what caused this and the Xero Partner Hub is operational now.
Expensify - Expensify site is down
Oct 8, 21:58 UTC Investigating - We are currently investigating this issue.
GCP - UPDATE: Google Cloud Storage customers are experiencing elevated latencies and error rates when performing upload or write operations.
Incident began at 2026-10-08 05:19 (all times are US/Pacific).Summary Google Cloud Storage customers are experiencing elevated latencies and error rates when performing upload or write operations Description We are continuing to mitigate the issue with Google Cloud Storage in the us-central1 region that began on Thursday, 2026-10-08 05:19 PDT. The initial mitigations applied by our engineering team continue to show observable improvements in error rates. Our engineering team is actively monitor...
Can we bring some kind of action towards Intuit for Quickbooks Notification exploit?
I believe, like a lot of the rest of the employees of businesses that run spam filters, there should be something being done at Intuit to remove the absolute ridiculous amount of spam that their "@notifications.intuit.com" brings upon us. I rarely ever have to pull a legitimate email for people and honestly its so rare that I insist that they deliver this email a different way. Honest to god if y...
GCP - UPDATE: Google Cloud Storage customers are experiencing elevated latencies and error rates when performing upload or write operations.
Incident began at 2026-10-08 05:19 (all times are US/Pacific).Summary Google Cloud Storage customers are experiencing elevated latencies and error rates when performing upload or write operations Description We are continuing to mitigate the issue with Google Cloud Storage in the us-central1 region that began on Thursday, 2026-10-08 05:19 PDT. The initial mitigations applied by our engineering team continue to show observable improvements in error rates. Our engineering team is actively monitor...
GCP - UPDATE: Google Cloud Storage customers are experiencing elevated latencies and error rates when performing upload or write operations.
Incident began at 2026-10-08 05:19 (all times are US/Pacific).Summary Google Cloud Storage customers are experiencing elevated latencies and error rates when performing upload or write operations Description We are experiencing an issue with Google Cloud Storage beginning on Thursday, 2026-10-08 05:19 PDT. Initial mitigations applied by our engineering team leading to observable improvements in error rates in our internal monitoring beginning 10:57 PDT. Work remains underway to roll out further...
GCP - UPDATE: Google Cloud Storage customers are experiencing elevated latencies and error rates when performing upload or write operations.
Incident began at 2026-10-08 05:19 (all times are US/Pacific).Summary Google Cloud Storage customers are experiencing elevated latencies and error rates when performing upload or write operations Description We are experiencing an issue with Google Cloud Storage beginning on Thursday, 2026-10-08 05:19 PDT. Initial mitigations applied by our engineering team leading to observable improvements in error rates in our internal monitoring. Work remains underway to roll out further mitigations. We wil...
GCP - UPDATE: Google Cloud Storage customers are experiencing elevated latencies and error rates when performing upload or write operations.
Incident began at 2026-10-08 05:19 (all times are US/Pacific).Summary Google Cloud Storage customers are experiencing elevated latencies and error rates when performing upload or write operations Description We are experiencing an issue with Google Cloud Storage beginning on Thursday, 2026-10-08 05:19 PDT. Our engineering team continues to investigate the issue. We will provide an update by Thursday, 2026-10-08 11:50 PDT with current details. Customer Symptoms Customers are experiencing elevat...
Elastic Cloud - Delayed or Unavailable project operation in GCP us-central1
Oct 8, 16:42 UTC Investigating - We are investigating an issue affecting some Elastic Cloud Serverless projects in the GCP us-central1 region. Customers may experience delayed or unavailable project operation.
Mixpanel - Temporary Data Ingestion Delay for US Projects
Oct 8, 09:32 PDT Investigating - We are currently experiencing delays in our data ingestion pipeline, which is affecting real-time data for projects enrolled in the US projects, resulting in delays for a subset of projects. While no data is being lost, our engineering team is actively investigating the matter and working to restore real-time functionality as quickly as possible. We appreciate your patience during this time.If you have any questions, please contact support.
Zoom - Zoom Phone Maintenance - SIN3 Data Center: October 8, 2026
THIS IS A SCHEDULED EVENT Oct 8, 09:00 PDT - Oct 9, 21:30 PDT Sep 15, 16:36 PDT Scheduled - Zoom will perform service maintenance at our SIN3 Data Center starting at 9:00 AM Pacific on October 8, 2026. Zoom Phone users registered to the those sip zones will be automatically registered in the NRT3 sip zone sequentially. During the maintenance window, a brief disconnection may be experienced and notifications may be missed. If you get disconnected, the system will attempt to reconnect you aut...
HubSpot - Some HubSpot tools may be unavailable for some users
Oct 8, 10:52 EDT Identified - Marketing email stats are delayed. The email performance page isn't showing up to date data for some customers in North America. Emails are still being delivered.We have identified an issue and are working on a solution. We will be back with an update within 3 hours.The information on this page reflects our understanding of the incident and impact at the time of the update. Oct 8, 10:45 EDT Investigating - We are investigating an issue impacting some HubSpot to...
Netlify - Elevated Edge Function Errors
Oct 8, 14:34 UTC Resolved - Between 13:16 and 13:24 UTC some requests to sites that use Edge Functions experienced increased latency and an elevated rate of 502 errors. This incident has been resolved.
ActiveCampaign - Whatsapp message responses delayed
Oct 8, 09:29 CDT Monitoring - The issue has been resolved and response messages are catching up now. Oct 8, 09:19 CDT Identified - The issue has been identified and a fix is being implemented. Oct 8, 09:03 CDT Investigating - We are aware of delays in receiving Whatsapp responses and engineering is actively investigating. Message sending is not impacted.
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence (AI) pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late September to early October 2026, and resulted in data exfiltration. "In this activity, the threat actor leveraged
CircleCI - Elevated wait times for machine jobs
Oct 8, 13:34 UTC Update - Customers using Linux machine jobs are experiencing elevated wait times, averaging about 11 minutes, with the longest waits exceeding 30 minutes on the medium, arm.medium and arm.large resource classes. Our engineers have identified the issue and are working on a fix. We will provide another update by 14:00 UTC. Oct 8, 13:00 UTC Identified - Customers may be experiencing elevated wait times for machine jobs. We are working to resolve this.
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber threat actors, enabled by the Integrity Technology Group, are combining automated scanning tools, large-scale botnets, and h...
Grid Protection Alliance openPDC and openHistorian
View CSAF Summary The following versions of Grid Protection Alliance openPDC and openHistorian are affected: openPDC <2.9.477, <2.9.482 (CVE-2026-104629, CVE-2026-100730, CVE-2026-105281, CVE-2026-85479, CVE-2026-101022) openPDC (Docker image) <2.9.477, <2.9.482 (CVE-2026-104629, CVE-2026-100730, CVE-2026-105281, CVE-2026-85479, CVE-2026-101022, CVE-2026-105278) openHistorian <2.8.580, <2.8.585 (...
Azure - Active -Azure Data Factory – Pipeline/Activity Failures and Timeouts – UK South
We are aware of an issue affecting Azure Data Factory in UK South, where a subset of customers may experience failures, delays, or timeouts with pipeline and activity runs, integration runtime management, or authoring operations. Our engineers are actively working to determine the cause and impact. As a workaround, customers are advised to cancel and retry affected runs that fail, time out, or remain in progress longer than expected.
Azure - Active -Azure Data Factory – Pipeline/Activity Failures, Delays & Timeouts – UK South
We are aware of an issue affecting Azure Data Factory in UK South, where a subset of customers may experience failures, delays, or timeouts when running pipelines and activities, managing integration runtimes, or performing authoring operations. Our engineers are actively investigating the cause and impact . Workaround: Customers are advised to cancel and retry affected pipeline or activity runs that fail, time out, or remain in progress longer than expected. Further updates will be provided as ...
Box - [Critical] Issues with Multiple Box Services
Oct 8, 02:33 PDT Resolved - After further monitoring, this incident is now considered resolved. Box services have been restored to full functionality. Please contact Box Support at https://support.box.com/ if you continue to experience any issues. Oct 8, 02:27 PDT Investigating - We are investigating an ongoing issue affecting All Files page, API, uploads, downloads, Box Sign and Notes. We will provide more information as soon as it is available.
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
The popular Tensorlake SDK (part of a project with 1,000+ GitHub stars) shipped a poisoned release (v.0.5.144) that was infected with the self-propagating Shai-Hulud worm. The malicious version was published through the project's legitimate GitHub Actions release pipeline, complete with valid SLSA provenance. The attacker poisoned main first, then let the trusted pipeline do the rest. This i...
Pwn2Own Ireland 2026 Day 1: 32 Zero-Days, $388,500, Samsung Galaxy S26 Hacked 3 Times
Full Day One results from Pwn2Own Ireland 2026. The scoreboard: 32 unique zero-days demonstrated. $388,500 in total bounties. Samsung Galaxy S26 compromised three times. AI infrastructure targeted for the first time, including OpenAI Codex, Oracle Autonomous AI Database, and LiteLLM. Longest chain of the day: Philips Hue Bridge Pro, seven zero-days. Notable: Every Galaxy S26 exploit used a four-bu...
Amplitude - BigQuery exports are lagging for US.
Oct 7, 20:33 PDT Identified - We are currently investigating an issue where all BigQuery exports are lagging for US (not EU) due to a downstream issue.
Box - [Medium] Issue with Enterprise Event Reports
Oct 7, 18:48 PDT Investigating - Our team is investigating an issue affecting enterprise event data. Admins may see missing or outdated information in event-based reports and Insights in the Admin Console, as well as in results from the Enterprise Events API. Box AI users may also see inaccurate AI unit usage. We will provide additional information as it becomes available.
Heap - User property data delayed in Heap connect syncs (US customers only)
Oct 7, 17:56 PDT Update - We are continuing to investigate this issue. Oct 7, 16:20 PDT Investigating - We are investigating delays in user property updates appearing in the Heap app for some customers. Our engineering team is working to identify the cause and restore normal processing. Data continues to be collected and no data has been lost.
Rippling - Issues using 1Password passkeys
Oct 7, 20:07 UTC Identified - Users with version 8.12.40.31 of the 1Password browser extension may be unable to complete passkey verification to sign in, or add new Rippling passkeys to their account. 1Password is preparing a fix, and we will share another update when more information is available.
CircleCI - Increased task wait times for Docker Gen2
Oct 7, 18:54 UTC Identified - There is an increased wait time for jobs on Docker Gen2.
GitHub - Incident with Git Operations, Issues, Actions and Pull Requests
Oct 7, 17:27 UTC Monitoring - The degradation has been mitigated. We are monitoring to ensure stability. Oct 7, 17:25 UTC Update - We observed widespread impact across GitHub services from 16:52 UTC to 17:01 UTC, and are investigating the root cause. All systems have recovered. This incident is a reoccurrence of the incident from earlier in the day https://www.githubstatus.com/incidents/djlmxz2zd0j7. Durable mitigation is in progress. We will provide another update in 30 minutes. Oct 7, ...
GhostAction campaign: new spike in malicious workflows
Hundreds of new repositories poisoned with malicious, secret extracting workflows. GitHub held most malicious workflows runs for approval, limiting the impact. Some victims found to also be affected by seemingly unrelated cryptominer attacks, hinting toward a pool of compromised credentials being used by multiple threat actor groups. submitted by /u/mabote [link] [comments]
GitHub - Incident with Git Operations, Pull Requests and Actions
Oct 7, 15:58 UTC Update - We are seeing full recovery across all systems including Git Operations, Pull Requests and Actions. We are continuing to investigate the root cause of the disruption between 15:06 UTC and 15:16 UTC, and will share another update shortly. Oct 7, 15:56 UTC Update - The degradation has been mitigated. We are monitoring to ensure stability. Oct 7, 15:49 UTC Monitoring - The degradation has been mitigated. We are monitoring to ensure stability. Oct 7, 15:49 UTC Up...
Supabase - Maintenance: Statuspage Migration
Status: In progressScheduled maintenance is currently in progress. We will provide updates as necessary.
Supabase - Statuspage Migration
THIS IS A SCHEDULED EVENT Oct 7, 15:00 - 17:00 UTC Sep 30, 22:08 UTC Scheduled - Starting October 7th, we are migrating our status page to a new platform to give you better visibility into Supabase's service status.What's changing:The status page URL will stay the same: https://status.supabase.comIf you are subscribed via email, you will automatically be resubscribed, no action needed.If you are subscribed via any other method (SMS, Slack, webhook, RSS, etc.), you will need to resubscribe on th...
Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)
On October 5th, Atlassian published patches&#;x26;#;xc2;&#;x26;#;xa0;for multiple products to fix an "Arbitrary File Access" vulnerability &#;x26;#;x5b;CVE-2026-21589&#;x26;#;x5d;. An attacker can read arbitrary files in the web application&#;x26;#;39;s directory, potentially exposing sensitive information such as configuration files.
CircleCI - Elevated level of infra fails on customer jobs
Oct 7, 14:44 UTC Monitoring - We're seeing signs of recovery. Docker Gen2 wait times are slightly elevated and we're monitoring. Oct 7, 14:27 UTC Investigating - We are investigating a rise in infra fails for customer jobs.
Infostealers are actively hunting AI Agents and developer keys - Warden Infostealer analysis
Log extractions (such as a compromised .claude.json file) show the stealer successfully exfiltrating raw primaryApiKey values and detailed OAuth account data tied to Anthropic/Claude accounts. By grabbing these CLI tokens, attackers are bypassing traditional web logins entirely, gaining direct, programmatic access to premium AI models, organizational workspaces, and potentially sensitive sou...
CircleCI - Delay on starting Machine Job Tasks
Oct 7, 14:06 UTC Resolved - The incident has been resolved. Thank you for your patience Oct 7, 13:52 UTC Monitoring - We are seeing signs of recovery and monitoring the situation. Oct 7, 13:40 UTC Investigating - Customers may be experiencing elevated wait times for Machine Job Tasks, we are investigating the root cause and will update when we know more.
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. "The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat
Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details
Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software
Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws
Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals to test its advanced artificial intelligence (AI) models with reduced safeguards and blocking classifiers, as the company claimed its Project Glasswing initiative uncovered at least 129,000 verified software vulnerabilities between April and July 2026. The company said it also found an additional
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware called LunexStealer (aka Psychedelic Stealer). The activity, which was observed by the agency in September 2026, has been attributed to a threat cluster dubbed UAC-0277. It did not disclose who the
Zoom - Service Degradation Affected Inbound and Outbound Calls for Zoom Contact Center
Oct 6, 20:42 PDT Resolved - This incident has been resolved and the affected services have been restored. Oct 6, 20:30 PDT Monitoring - On 10/07/2026, Between 2:32 UTC to 2:44 UTC, A subset of users may have experienced issues with inbound and outbound calls for Zoom Contact Center.This incident has been resolved and the affected services have been restored.
CircleCI - Emergency Infrastructure Maintenance
Oct 7, 03:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 6, 23:17 UTC Scheduled - We will be performing emergency maintenance on October 7, 2026, from 03:00 UTC to 05:00 UTC. While we expect the impact to be minimal during this window, pipelines, workflows, jobs and notifications may briefly experience interruptions, including delays or failures in workflows and jobs starting. We will provide an update when the maintenance begi...
Zoom - Service Degradation Affecting Zoom Calendar
Oct 6, 19:41 PDT Investigating - We are currently investigating a service degradation where new users may be experiencing issues with calendar provisioning.Our team is actively working to identify the impact and root cause. We will provide an update as soon as more information becomes available.We appreciate your patience as we work to resolve this issue.
Zoom - Service Degradation Affecting Zoom Slides Generation in US Region
Oct 6, 19:08 PDT Investigating - We are currently investigating a service degradation affecting a subset of users who are experiencing difficulties with Zoom Slides Generation in US Region.Our team is actively working to identify the impact and root cause. We will provide an update as soon as more information becomes available.We appreciate your patience as we work to resolve this issue.
Netlify - Elevated error rates for AI Gateway
Oct 6, 20:12 UTC Resolved - Between 19:05 and 19:18 UTC, some requests to the AI Gateway returned errors. We've since increased the capacity of the affected service, and error rates returned to normal levels at 19:18 UTC. We apologize for the disruption.
GitHub - Several services are degraded
Oct 6, 19:57 UTC Investigating - We are investigating reports of degraded performance for Pull Requests and Webhooks
Rockstar Games has now been compromised several different ways since 2018, and none of them were a zero-day
Four incidents, four completely different initial access paths: 2022, Lapsus$: MFA fatigue against an employee, then hardcoded creds and API keys sitting in plaintext in Slack and Confluence. Early 2023, GTA Online: P2P netcode on PC reverse-engineered into RCE via malicious packets. The fix was kernel-level BattlEye. April 2026, ShinyHunters: no human identity involved. Long-lived OAuth tokens s...
Sentry - Sentry dashboard down
Oct 6, 18:57 UTC Investigating - We are investigating an issue impacting our dashboard in both US and EU regions
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. The products, which claim to offer campaign optimization, spend audits, and business-account connections, are designed with one goal in
Supabase - Upgrade Issues
Status: ResolvedWe've rolled out a fix for this issue and re-enabled upgrades in the dashboard. We apologize for the inconvenience.
Rippling - RPass Chrome extension login failures
Oct 6, 18:00 UTC Resolved - On October 6, some users were unable to sign in to the RPass Chrome extension. We reverted the change that caused the issue and confirmed sign-in was restored by 3:00 PM PDT.
You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) - watchTowr Labs
submitted by /u/dx7r__ [link] [comments]
Optimizely - Data processing delays in EMEA
Oct 6, 17:00 UTC Resolved - We're seeing delays in processing incoming data in the EU region. Campaigns that depend on recent data may be delayed or may not send.A fix is in place and data processing is back to normal. We're watching to make sure it stays stable.
Vercel - Vercel Auth login failures for pages with Deployment Protection enabled
Oct 6, 16:26 UTC Resolved - This incident has been resolved. Oct 6, 16:17 UTC Monitoring - A fix has been implemented and we are monitoring the results. Oct 6, 16:14 UTC Identified - The issue has been identified and a fix is being implemented. Oct 6, 16:10 UTC Investigating - We are investigating an issue causing Vercel Auth login failures for pages with Deployment Protection enabled. We will provide an update as more information becomes available.