AI Security Digest
Aggregated ecosystem risk analysis
Vendor Watchlist
Tracking 0 critical integrations
Threat Stream Feed
Real-time security logs and system alerts
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported the flaw through OpenAI's bug bounty program on October 18, and OpenAI fixed it eight days later and rated it P1, its most serious category.
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in the third quarter of 2026. That amounts to 197,400 attacks per day, or one attack every 0.44
GitHub - Incident with Dependabot
Oct 30, 20:59 UTC Investigating - We are investigating reports of impacted performance for some GitHub services.
Snowflake - INC20000321
Oct 30, 20:38 UTC Investigating - Current status: We're investigating an issue with Snowflake Data Cloud. We'll provide an update within 1 hour.Customer experience: Customers hosted in the specified regions may experience errors or connectivity issues when using Snowflake Openflow. Other features that leverage Snowpark Container Services aren't affected by this issue.
Akamai - Customer Security Advisory: CVE-2026-98432
Oct 30, 18:03 UTC Investigating - Akamai is aware of the recently published remote code execution CVE-2026-98432. We are actively investigating and taking the appropriate mitigation actions, while we continue to monitor our platform in parallel. We will soon be posting more details for customers and partners with a valid Control Center login at https://community.akamai.com/customers/s/group/0F90f000000DFgx/service-incident-notifications. If you have questions or are experiencing an impact due t...
GitHub - Incident with Actions, Pages, and Webhooks
Oct 30, 18:00 UTC Update - Pages is experiencing degraded performance. We are continuing to investigate. Oct 30, 17:50 UTC Investigating - We are investigating reports of degraded performance for Actions and Webhooks
Cloudflare - DOH (Doha) on 2026-10-28
Oct 30, 18:00 UTCCompleted - The scheduled maintenance has been completed.Oct 28, 18:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 28, 17:00 UTCScheduled - Maintenance will begin soon as scheduled.Oct 28, 06:08 UTCScheduled - We will be performing scheduled maintenance in DOH (Doha) datacenter between 2026-10-28 18:00 and 2026-10-30 18:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight in...
Cloudflare - FUK (Fukuoka) on 2026-10-30
Oct 30, 17:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 30, 16:00 UTCScheduled - Maintenance will begin soon as scheduled.Oct 29, 11:26 UTCScheduled - We will be performing scheduled maintenance in FUK (Fukuoka) datacenter on 2026-10-30 between 17:00 and 21:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected ...
Cloudflare - OKA (Naha) on 2026-10-30
Oct 30, 17:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 30, 16:00 UTCScheduled - Maintenance will begin soon as scheduled.Oct 29, 11:26 UTCScheduled - We will be performing scheduled maintenance in OKA (Naha) datacenter on 2026-10-30 between 17:00 and 21:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected reg...
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been attributed by CrowdStrike to a China-based "targeted intrusion adversary" it tracks under the moniker Vapor Panda (previously VexatiousTemper). First identified in
Cloudflare - SJO (San José) on 2026-10-30
Oct 30, 16:30 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 30, 16:12 UTCScheduled - Maintenance will begin soon as scheduled.Oct 30, 16:12 UTCScheduled - We will be performing scheduled maintenance in SJO (San José) datacenter on 2026-10-30 between 16:30 and 19:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected...
Bloatware in Aftermarket Auto Parts
This story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about. Among the pre-installed bloatware—or spyware, if you’re being less charitable—was a voice assistant equipped with WebView, an Android system component ...
GitHub - Disruption with GitHub services
Oct 30, 14:49 UTC Monitoring - The degradation affecting Pages has been mitigated. We are monitoring to ensure stability. Oct 30, 14:48 UTC Update - A temporarily overloaded component triggered a burst of errors between 14:21 and 14:30 UTC across numerous services. Component health has returned to normal and we continue to monitor while investigating the root cause. Oct 30, 14:45 UTC Update - Issues is operating normally. Oct 30, 14:39 UTC Update - Pages is experiencing degraded performan...
Cloudflare - HNL (Honolulu) on 2026-10-30
Oct 30, 13:00 UTCCompleted - The scheduled maintenance has been completed.Oct 30, 08:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 30, 07:00 UTCScheduled - Maintenance will begin soon as scheduled.Oct 22, 22:10 UTCScheduled - We will be performing scheduled maintenance in HNL (Honolulu) datacenter on 2026-10-30 between 08:00 and 13:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increa...
Supabase - Logs degraded in multiple regions
Status: IdentifiedWe have identified the cause of the Logs degradation and a fix is being prepared. Other services remain unaffected. We'll post another update as soon as we have one.
Figma - Temporary Disruption with Sites
Oct 30, 10:38 UTC Investigating - Sites publishing is currently degraded due to an issue with a third party dependency.
Cloudflare - MSP (Minneapolis) on 2026-10-30
Oct 30, 09:30 UTCCompleted - The scheduled maintenance has been completed.Oct 30, 07:30 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 30, 06:30 UTCScheduled - Maintenance will begin soon as scheduled.Oct 27, 14:20 UTCScheduled - We will be performing scheduled maintenance in MSP (Minneapolis) datacenter on 2026-10-30 between 07:30 and 09:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight inc...
Cloudflare - EWR (Newark) on 2026-10-30
Oct 30, 09:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Oct 30, 08:00 UTCScheduled - Maintenance will begin soon as scheduled.Oct 29, 10:25 UTCScheduled - We will be performing scheduled maintenance in EWR (Newark) datacenter on 2026-10-30 between 09:00 and 12:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected r...
Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry to install a persistent SSH backdoor on infected hosts. The issue has since been traced to the compromise of the Cursor Marketplace, prompting the AI coding platform Cursor to briefly take down the service to remove the malware. "We identified a security incident
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-97229 (CVSS score: 10.0) - An integer overflow or wraparound vulnerability in GitLab Community Edition and Enterprise
AWS - Service impact: Increased invoke error rates
Between 7:27 AM and 8:47 AM PDT, and between 10:47 AM and 4:15 PM PDT, we experienced intermittent invoke error rates and latencies for HTTP APIs in the US-WEST-2 Region. During this time, customers would have observed increased latency or errors when invoking HTTP APIs, with elevated errors occurring between 3:12 PM and 3:45 PM PDT. This represented the period of highest customer impact with the majority of affected customers experiencing errors or increased latencies during this window. Majori...
Plaid - Maintenance: [Wells Fargo] Scheduled Maintenance
Status: ScheduledWells Fargo is planning maintenance on its Account Statements API from 1 November 06:00 UTC to 1 November 11:00 UTC. During this five-hour window, statement retrieval may be intermittently unavailable.Affected components API - Production (Under maintenance)
Twilio - SMS Delivery Delays from Twilio to Altice United States
Oct 29, 17:11 PDT Identified - Twilio customers may be experiencing SMS delivery delays from Twilio to Altice network subscribers in the United States. Our team has identified the cause, and is working to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available. Oct 29, 17:10 PDT Investigating - Twilio customers may be experiencing SMS delivery delays from Twilio to Altice network subscribers in the United States. Our team is actively invest...
SendGrid - SMS Delivery Delays from Twilio to Altice United States
Oct 29, 17:11 PDT Identified - Twilio customers may be experiencing SMS delivery delays from Twilio to Altice network subscribers in the United States. Our team has identified the cause, and is working to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available. Oct 29, 17:10 PDT Investigating - Twilio customers may be experiencing SMS delivery delays from Twilio to Altice network subscribers in the United States. Our team is actively invest...
Custom PHP2Shell Exploit Chained with Kernel LPE to Root Versions of Palo Alto Networks PAN-OS Firewalls in the Wild
submitted by /u/BigPoppaPump36 [link] [comments]
Twilio - Poland SMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 29, 16:00 - 21:00 PDT Oct 28, 14:21 PDT Scheduled - Our SMS carrier partner in Poland is conducting a planned maintenance from 29 October 2026 at 16:00 PDT until 29 October 2026 at 21:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Poland handsets.
SendGrid - Poland SMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 29, 16:00 - 21:00 PDT Oct 28, 14:21 PDT Scheduled - Our SMS carrier partner in Poland is conducting a planned maintenance from 29 October 2026 at 16:00 PDT until 29 October 2026 at 21:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Poland handsets.
SendGrid - Portugal SMS Carrier Partner Maintenance
Oct 29, 15:31 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 29, 04:37 PDT Scheduled - Our SMS carrier partner in Portugal is conducting a planned maintenance from 29 October 2026 at 15:30 PDT until 29 October 2026 at 17:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Portugal handsets.We are aware of the short notice and are working with our Carrier Partners to provide earlier no...
Twilio - Portugal SMS Carrier Partner Maintenance
Oct 29, 15:31 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 29, 04:37 PDT Scheduled - Our SMS carrier partner in Portugal is conducting a planned maintenance from 29 October 2026 at 15:30 PDT until 29 October 2026 at 17:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Portugal handsets.We are aware of the short notice and are working with our Carrier Partners to provide earlier no...
SendGrid - United Kingdom Account Security Carrier Partner Maintenance - Vodafone
Oct 29, 15:30 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 29, 05:38 PDT Scheduled - Our carrier partner Vodafone United Kingdom is conducting a planned maintenance from 29 October 2026 at 15:30 PDT until 29 October 2026 at 22:15 PDT. During the maintenance window, there could be intermittent API request failures for Vodafone United Kingdom customers.Impacted Products: Legacy Identity MatchAndAttributes, Lookup Identity MatchWe ar...
Twilio - United Kingdom Account Security Carrier Partner Maintenance - Vodafone
Oct 29, 15:30 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 29, 05:38 PDT Scheduled - Our carrier partner Vodafone United Kingdom is conducting a planned maintenance from 29 October 2026 at 15:30 PDT until 29 October 2026 at 22:15 PDT. During the maintenance window, there could be intermittent API request failures for Vodafone United Kingdom customers.Impacted Products: Legacy Identity MatchAndAttributes, Lookup Identity MatchWe ar...
Twilio - SMS Delivery Receipt Delays from Twilio to Multiple Networks in Multiple Countries Across Africa and Asia
Oct 29, 15:18 PDT Resolved - The incident has been resolved and SMS delivery receipts from Twilio to network subscribers on affected networks in multiple countries across Africa and Asia are operating normally. Oct 29, 13:17 PDT Monitoring - We have observed a recovery in SMS delivery receipts from Twilio to Multiple Countries Across Africa and Asia and are monitoring service stability. We will provide another update in 2 hours or as soon as more information becomes available. Oct 29, 12:14...
SendGrid - SMS Delivery Receipt Delays from Twilio to Multiple Networks in Multiple Countries Across Africa and Asia
Oct 29, 15:18 PDT Resolved - The incident has been resolved and SMS delivery receipts from Twilio to network subscribers on affected networks in multiple countries across Africa and Asia are operating normally. Oct 29, 13:17 PDT Monitoring - We have observed a recovery in SMS delivery receipts from Twilio to Multiple Countries Across Africa and Asia and are monitoring service stability. We will provide another update in 2 hours or as soon as more information becomes available. Oct 29, 12:14...
Twilio - Russia SMS Carrier Maintenance - Gazprombank Mobile
Oct 29, 14:00 PDT Completed - The scheduled maintenance has been completed. Oct 29, 13:01 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 26, 06:48 PDT Scheduled - The Gazprombank Mobile network in Russia is conducting a planned maintenance from 29 October 2026 at 13:00 PDT until 29 October 2026 at 14:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to Gazprombank Mobile Russia handsets.
SendGrid - Russia SMS Carrier Maintenance - Gazprombank Mobile
Oct 29, 14:00 PDT Completed - The scheduled maintenance has been completed. Oct 29, 13:01 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 26, 06:48 PDT Scheduled - The Gazprombank Mobile network in Russia is conducting a planned maintenance from 29 October 2026 at 13:00 PDT until 29 October 2026 at 14:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to Gazprombank Mobile Russia handsets.
Twilio - Japan SMS Carrier Partner Maintenance
Oct 29, 13:00 PDT Completed - The scheduled maintenance has been completed. Oct 29, 12:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 15, 04:17 PDT Scheduled - Our SMS carrier partner in Japan is conducting a planned maintenance from 29 October 2026 at 12:00 PDT until 29 October 2026 at 13:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to NTT docomo Japan handsets.
Twilio - Russia SMS Carrier Maintenance - MegaFon
THIS IS A SCHEDULED EVENT Oct 29, 13:00 - 17:00 PDT Oct 27, 16:11 PDT Scheduled - The MegaFon network in Russia is conducting a planned maintenance from 29 October 2026 at 13:00 PDT until 29 October 2026 at 17:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to MegaFon Russia handsets.
SendGrid - Russia SMS Carrier Maintenance - MegaFon
THIS IS A SCHEDULED EVENT Oct 29, 13:00 - 17:00 PDT Oct 27, 16:11 PDT Scheduled - The MegaFon network in Russia is conducting a planned maintenance from 29 October 2026 at 13:00 PDT until 29 October 2026 at 17:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to MegaFon Russia handsets.
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthropic said on October 27 that its AI model wrote an exploit that uses the flaw to let a remote attacker with no credentials run commands as root on Linux servers with a
Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim to be desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude Opus, only to deliver a malware family called
Datadog - The Datadog US1 Status Page Is Changing on October 29 2026.
Oct 29, 11:00 EDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 28, 10:47 EDT Update - We will be undergoing scheduled maintenance during this time. Oct 15, 17:49 EDT Scheduled - Datadog’s US1 status page is changing. Starting on October 29 2026, we’ll have a whole new look and experience based on Datadog’s own Status Pages product: https://docs.datadoghq.com/incident_response/status_pages/ The new Datadog status page will be accessi...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerability These types of vulnerabilities are a frequent attack vecto...
Where do you get reliable detection rules from?
I’ve been experimenting with detection engineering in my home lab, and I’m curious how others approach building and maintaining high-quality detections. I recently migrated a large number of detection rules from Sigma and Splunk SPL into Wazuh syntax, primarily using Falco and Sysmon for Linux as telemetry sources. After setting everything up, I started executing real malware samples from MalwareB...
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. "The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate," GitHub said. The feature, which currently supports only npm packages, is available in public preview
GitHub - Disruption with Copilot Cloud services
Oct 29, 10:22 UTC Update - We are experiencing increased failures and latency on our agent sessions service, including creating and listing sessions. This can impact cloud based agent sessions on web, mobile, VS Code, CLI and the GitHub Copilot app. Oct 29, 10:19 UTC Investigating - We are investigating reports of impacted performance for some GitHub services.
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project's own GitLab server a week after GitLab released a fix, Alpine Linux said on 28 October. The flaw, CVE-2026-97229 (CVSS score: 10.0), can let an attacker run code on a GitLab server through a crafted regular expression in a CI configuration. Alpine found no evidence that the attack worked but
Loggly - Indexing Delay
Oct 29, 01:09 PDT Investigating - Our monitoring has detected an issue causing delayed data indexing for a small subset of customers. Some users may experience delays before new data appears in search and dashboards. We are actively working on a resolution and will provide updates as they become available.
Optimizely - Optimizely Digital Experience Platform (DXP) - TLS 1.0 and 1.1 Deprecation for Apex Domain Redirects
Oct 29, 08:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 14, 13:08 UTC Scheduled - Schedule:* Date range: October 29, 2026 - November 6, 2026 * Daily window: 8:00 UTC - 12:00 UTC Between October 29, 2026 and November 6, 2026, we will be performing scheduled maintenance to enhance our TLS security configuration. During this period, maintenance will be conducted daily between 8:00 UTC and 12:00 UTC. As part of this update, we will...
SendGrid - United States and Canada Twilio SMS and MMS Maintenance
Oct 29, 00:02 PDT Completed - The scheduled maintenance has been completed. Oct 28, 20:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 4, 00:24 PDT Scheduled - Twilio is conducting a planned maintenance from 28 October 2026 at 20:00 PDT until 29 October 2026 at 00:00 PDT. During the maintenance window, there could be intermittent delays or failures delivering SMS and MMS to and from United States and Canada handsets when sendin...
SendGrid - United Kingdom Account Security Carrier Partner Maintenance - Three
THIS IS A SCHEDULED EVENT Oct 29, 00:00 - 04:00 PDT Oct 26, 02:59 PDT Scheduled - Our carrier partner Three United Kingdom is conducting a planned maintenance from 29 October 2026 at 00:00 PDT until 29 October 2026 at 04:00 PDT. During the maintenance window, there could be intermittent API request failures for Three United Kingdom customers.Impacted Products: Lookup SIM Swap, Legacy Identity MatchAndAttributes
Twilio - United Kingdom Account Security Carrier Partner Maintenance - Three
THIS IS A SCHEDULED EVENT Oct 29, 00:00 - 04:00 PDT Oct 26, 02:59 PDT Scheduled - Our carrier partner Three United Kingdom is conducting a planned maintenance from 29 October 2026 at 00:00 PDT until 29 October 2026 at 04:00 PDT. During the maintenance window, there could be intermittent API request failures for Three United Kingdom customers.Impacted Products: Lookup SIM Swap, Legacy Identity MatchAndAttributes
Rippling - Issues editing Supergroups
Oct 29, 06:48 UTC Identified - Users without super-admin privileges can’t edit supergroups. We’re deploying a fix.
SendGrid - Gateway API (Lookup API) Failure Increase on Verizon in United States
Oct 28, 23:34 PDT Investigating - Twilio customers may be experiencing failure responses for Lookup API transactions on Verizon in the United States. Our team is actively investigating the issue. We will provide another update in 1 hour or as soon as more information becomes available.
Twilio - Gateway API (Lookup API) Failure Increase on Verizon in United States
Oct 28, 23:34 PDT Investigating - Twilio customers may be experiencing failure responses for Lookup API transactions on Verizon in the United States. Our team is actively investigating the issue. We will provide another update in 1 hour or as soon as more information becomes available.
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector. The vulnerability in question is CVE-2026-41709 (CVSS score:
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. "Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the internet," the network security company said in an update to its advisory. The vulnerabilities, tracked as
Snowflake - INC20000319
Oct 29, 04:29 UTC Investigating - Current status: We're investigating an issue with Snowflake Data Cloud. We'll provide an update within 60 minutes.Customer experience: Customers hosted in the specified regions may experience delays or intermittent failures when resuming or managing virtual warehouses. Existing warehouses that are already running may be unaffected. Additionally, serverless tasks may take longer than expected to run.Impact start time: 03:00 UTC October 29, 2026
Twilio - Sendgrid Maintenance Impacting Delivery and Account Configuration
THIS IS A SCHEDULED EVENT Oct 28, 21:00 - 22:30 PDT Oct 26, 15:03 PDT Update - This maintenance has been rescheduled. We are upgrading our infrastructure on October 28 2026, from 21:00 to 22:30 PDT to enhance system stability and scalability.During this window customers may experience delays impacting the following functionalities:- Email delivery for new sign-ups and upgraded accounts- Account configuration and settings updates- Processing of group unsubscribes- Dedicated IP and IP pool change...
Twilio - United States SMS and MMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 28, 21:00 PDT - Oct 29, 01:00 PDT Oct 26, 16:08 PDT Scheduled - Our SMS and MMS carrier partner in the United States is conducting a planned maintenance from 28 October 2026 at 21:00 PDT until 29 October 2026 at 01:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS and MMS to and from United States handsets via subset of United States short codes.
SendGrid - United States SMS Carrier Maintenance - Verizon
THIS IS A SCHEDULED EVENT Oct 28, 21:00 - 22:00 PDT Oct 19, 23:06 PDT Scheduled - The Verizon network in the United States is conducting a planned maintenance from 28 October 2026 at 21:00 PDT until 28 October 2026 at 22:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Verizon United States handsets.
SendGrid - United States SMS and MMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 28, 21:00 PDT - Oct 29, 01:00 PDT Oct 26, 16:08 PDT Scheduled - Our SMS and MMS carrier partner in the United States is conducting a planned maintenance from 28 October 2026 at 21:00 PDT until 29 October 2026 at 01:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS and MMS to and from United States handsets via subset of United States short codes.
Twilio - United States SMS Carrier Maintenance - Verizon
THIS IS A SCHEDULED EVENT Oct 28, 21:00 - 22:00 PDT Oct 19, 23:06 PDT Scheduled - The Verizon network in the United States is conducting a planned maintenance from 28 October 2026 at 21:00 PDT until 28 October 2026 at 22:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Verizon United States handsets.
SendGrid - Sendgrid Maintenance Impacting Delivery and Account Configuration
THIS IS A SCHEDULED EVENT Oct 28, 21:00 - 22:30 PDT Oct 26, 15:03 PDT Update - This maintenance has been rescheduled. We are upgrading our infrastructure on October 28 2026, from 21:00 to 22:30 PDT to enhance system stability and scalability.During this window customers may experience delays impacting the following functionalities:- Email delivery for new sign-ups and upgraded accounts- Account configuration and settings updates- Processing of group unsubscribes- Dedicated IP and IP pool change...
SendGrid - Flex Agent Copilot Note Generation Issues
Oct 28, 20:50 PDT Investigating - We are investigating an issue affecting Flex Agent Copilot, where auto-generation of notes is currently failing for a subset of customers. Other Flex features remain operational, and our engineering team is actively working to resolve the failure. We will provide our next update in 1 hour or as soon as more details become available.
Twilio - Flex Agent Copilot Note Generation Issues
Oct 28, 20:50 PDT Investigating - We are investigating an issue affecting Flex Agent Copilot, where auto-generation of notes is currently failing for a subset of customers. Other Flex features remain operational, and our engineering team is actively working to resolve the failure. We will provide our next update in 1 hour or as soon as more details become available.
SendGrid - United States SMS and MMS Carrier Partner Maintenance
Oct 28, 20:02 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 29, 08:15 PDT Scheduled - Our SMS and MMS carrier partner in the United States is conducting a planned maintenance from 28 October 2026 at 20:00 PDT until 29 October 2026 at 00:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS and MMS to United States handsets via subset of United States long codes.
SendGrid - Russia SMS Carrier Maintenance - MTS
Oct 28, 20:01 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 27, 09:58 PDT Scheduled - The MTS network in Russia is conducting a planned maintenance from 28 October 2026 at 20:00 PDT until 28 October 2026 at 21:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to MTS Russia handsets.
Twilio - United States and Canada Twilio SMS and MMS Maintenance
THIS IS A SCHEDULED EVENT Oct 28, 20:00 PDT - Oct 29, 00:00 PDT Sep 4, 00:24 PDT Scheduled - Twilio is conducting a planned maintenance from 28 October 2026 at 20:00 PDT until 29 October 2026 at 00:00 PDT. During the maintenance window, there could be intermittent delays or failures delivering SMS and MMS to and from United States and Canada handsets when sending via long codes, short codes and toll free numbers.
Twilio - United States SMS and MMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 28, 20:00 PDT - Oct 29, 00:00 PDT Sep 29, 08:15 PDT Scheduled - Our SMS and MMS carrier partner in the United States is conducting a planned maintenance from 28 October 2026 at 20:00 PDT until 29 October 2026 at 00:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS and MMS to United States handsets via subset of United States long codes.
Twilio - Russia SMS Carrier Maintenance - MTS
THIS IS A SCHEDULED EVENT Oct 28, 20:00 - 21:00 PDT Oct 27, 09:58 PDT Scheduled - The MTS network in Russia is conducting a planned maintenance from 28 October 2026 at 20:00 PDT until 28 October 2026 at 21:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to MTS Russia handsets.
[CISA KEV] CVE-2026-97229: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Product: Community Edition and Enterprise Edition by GitLab Description: GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation. Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Loggly - Indexing Delay
Oct 28, 15:38 PDT Update - We're continuing to investigate the issue. More updates will be published in two hours. Oct 28, 14:38 PDT Update - We're continuing to investigate the issue. More updates will come in one hour. Oct 28, 13:35 PDT Investigating - Our engineers have identified an issue with log ingestion starting at 12:50:32 PDT. All customer data continues to be collected and stored, but indexing of all customer data is being delayed. Customer data from after this time will not appe...
HashiCorp - Maintenance: HCP Terraform Scheduled Maintenance
Status: ScheduledHCP Terraform and HCP Waypoint will undergo scheduled maintenance on Saturday December 5th 2026, beginning at 17:00 UTC. This maintenance is necessary to improve performance and increase capacity. We expect this maintenance to complete in under 2.5 hours. These services will be unavailable until maintenance completes. Customers will not be able to manually or automatically trigger Terraform operations during maintenance. Updates will be posted as necessary throughout the main...
Plaid - Maintenance: [Chase] Scheduled Maintenance
Status: ScheduledChase is planning maintenance from 1 November 05:00 UTC to 1 November 07:00 UTC. During this window, we expect up to 120 minutes of downtime for Item adds, API calls, and scheduled updates.Affected components API - Production (Under maintenance)
CircleCI - Delays for gen2 dedicated IP range jobs
Oct 28, 18:51 UTC Identified - We’ve identified the cause as limited compute availability from our cloud provider, and we are working to free up additional capacity for these jobs to restore normal start times. We'll provide another update again shortly. Oct 28, 18:15 UTC Investigating - We are investigating delays in starting docker gen2 jobs that use dedicated IP ranges. Jobs are currently delayed by about 10 minutes.No other resource classes are impacted at this time. We will continue to p...
Datadog - Metrics query are disrupted
Oct 28, 18:39 UTCResolved - The issue is now resolved. Oct 28, 18:23 UTCMonitoring - We are monitoring the issue. Oct 28, 18:09 UTCMonitoring - We are monitoring the issue. Oct 28, 17:26 UTCIdentified - We identified the issue. Oct 28, 16:56 UTCInvestigating - We are investigating the issue. Oct 28, 16:40 UTCInvestigating - We are investigating the issue. Oct 28, 16:10 UTCInvestigating - We are investigating metrics issues. As a result, some users might not be able to load dashboard or query met...
Optimizely - Content Graph Performance Degredation
Oct 28, 17:27 UTC Monitoring - Content Graph experienced http 500 and 404 errors, which we have remediated. We are continuing to monitor the health of the service closely.
CVE Intel update - The open-source CVE triage tool.
Last week I posted CVE Intel here and got really good advice. Thank you all. Here's what's new since then. (original post: https://www.reddit.com/r/cybersecurity/comments/1x8v176/opensource_cve_triage_in_one_place_kev_epss_nvd/) Quick what: CVE Intel is an open-source tool that pulls CVE data from NVD, CISA KEV, EPSS, OSV and public exploit sources into one place. It runs as a desktop app, CLI, RE...
Datadog - Metrics query are disrupted
Oct 28, 12:56 EDT Update - We are investigating the issue. Oct 28, 12:40 EDT Update - We are investigating the issue. Oct 28, 12:10 EDT Investigating - We are investigating metrics issues. As a result, some users might not be able to load dashboard or query metrics.Please note that data processing and alerts are not affected by this incident.
Supabase - Delayed Log Delivery from 14:10 - 15:30 UTC
Status: MonitoringBetween 14:10 - 15:30 UTC we have experienced an issue in delivering logs, leading to a delay of about 7–8 minutes. Most affected events have now been recovered - a small subset of events is still being re-inserted and we will confirm once completed.Affected components Logging & Observability (Degraded performance)
Tailscale Releases Emergency Fix for “Tailworm” SSH Flaws
Tailscale released version 1.104.4 after researchers demonstrated privilege-escalation vulnerabilities in Tailscale SSH. An attacker with access to an already-authorized device could potentially gain elevated privileges on reachable systems. A compromised machine could become a stepping stone into other servers permitted by SSH policy. This is not an unauthenticated Internet-wide worm. Updat...
Rippling - QuickBooks data import delayed for some customers
Oct 28, 15:57 UTC Investigating - We are experiencing delays importing data from QuickBooks for some customers
GitHub - Disruption with some Copilot services
Oct 28, 14:55 UTC Update - We are experiencing degraded availability for the GPT-5.3-Codex, GPT-5.6 Luna, GPT-6.1 Sol, GPT-5.6 Terra, GPT-6 Luna, and MAI Code 1.1 Flash models in Copilot products and IDE surfaces. We have identified the root cause and working to apply a mitigation. While we work to resolve the issue we recommend choosing another model to continue using Copilot. Oct 28, 14:33 UTC Update - We are experiencing degraded availability for the GPT-5.3-Codex, GPT-5.6 Luna, GPT-6.1 So...
Zoom - Service Degradation Affecting the Evaluations Acknowledge Button in Zoom Quality Management in the US Region
Oct 28, 07:31 PDT Identified - We have successfully identified the root cause of the missing evaluations acknowledge button in Zoom Quality Management reports in the US region.Our team is actively working on a resolution, and we will keep you informed with timely updates as progress is made. Thank you for your patience.
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026-104351 (CVSS score: 9.9) - A code injection vulnerability that could lead to arbitrary code execution.
Heroku - Heroku Feature Degradation
Node.js builds are currently experiencing elevated error rates due to issues with an upstream dependency.
Xero - Global: Xero - customers are experiencing issues across Xero
Oct 28, 09:58 UTC Monitoring - Our team has implemented a fix and we are currently monitoring the results. Oct 28, 09:33 UTC Identified - We're aware that customers are experiencing errors across Xero after logging in. We have identified the cause of the issue and are implementing a fix. This is our top priority and we will update you as soon as we can.
New Relic - NGEP API internal JP down
Oct 28, 09:42 UTC Resolved - EndImpact triggered Oct 28, 09:35 UTC Update - We are investigating an issue in the JP region affecting the Next Gen Entity Platform (NGEP) where some customers may be unable to view or manage entities. Our engineering teams are engaged and are actively working to resolve the issue. Oct 28, 09:33 UTC Investigating - We are investigating an issue in the JP region affecting the Next Gen Entity Platform (NGEP) where some customers may be unable to view or manage en...
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
submitted by /u/One_Paint8721 [link] [comments]
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after the model was prompted, not seen in any real attack, and Anthropic reported every flaw to the vendor first, so all of them are already patched. One proof of
Rippling - Rippling AI is down
Oct 28, 06:55 UTC Resolved - Rippling AI is fully recovered. Oct 28, 06:50 UTC Monitoring - We deployed a fix and the system has started to recover. Full recovery is rolling out. Oct 28, 06:44 UTC Identified - Rippling AI is not responding to user queries. We identified the root cause and are remediating the problem.
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background process carries out with root privileges. To use them, an attacker must
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-111497 (CVSS score: 9.2) - An unchecked return value vulnerability in
Amplitude - Planned Data Processing Maintenance - US Data Center
Oct 27, 16:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 22, 16:43 PDT Scheduled - From 23:00 Oct 27 to 01:00 Oct 28 UTC, we will be performing maintenance on components of the core ingestion infrastructure in our US data center.During this time, customers may see data processing delays. No data loss is expected during the maintenance.The EU data center won't be affected.
DigitalOcean - Kubernetes Cluster Management Operations
Oct 27, 22:14 UTC Investigating - Our Engineering team is currently investigating an issue affecting Managed Kubernetes cluster operations.During this time, Customers may experience delays or failures when attempting to create, delete, scale, or upgrade clusters, as well as with other management tasks.Existing workloads running on Managed Kubernetes are not affected and will continue to operate normally.Our Engineering team is actively investigating and treating this with the highest priority. ...
ActiveCampaign - Delayed Processing for Imports, Exports, Bulk Actions, and Campaign sending.
Oct 27, 13:54 CDT Resolved - This incident has been resolved. Oct 27, 13:34 CDT Update - We are continuing to monitor for any further issues. Oct 27, 13:32 CDT Monitoring - Delays should be resolved. Engineers are activity monitoring. Oct 27, 13:20 CDT Update - We are continuing to investigate this issue. Oct 27, 13:19 CDT Investigating - Some customers may experience delays with imports, exports, bulk actions, and campaign sending.
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
CISA has added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities catalog. Federal civilian agencies have been directed to remediate the vulnerabilities by October 29. There is an important correction to earlier reporting. Palo Alto Networks Unit 42 retracted its claim that PHP2Shell caused a European government agency compromise. Researchers confirmed that an attack...
Optimizely - Asset uploads failing in Optimizely CMP and DAM
Oct 27, 15:51 UTC Investigating - We're aware of an issue where uploads are failing in Optimizely Content Marketing Platform (CMP) and Digital Asset Management (DAM). Users trying to upload assets may see an "Upload Error" message, and the upload won't finish.Our Engineering team is investigating right now and is working to find the cause and restore normal upload behavior as quickly as possible.We'll post more details on the investigation soon. We apologize for the disruption and thank you for...
GCP - RESOLVED: Multiple services were experiencing issues in the europe-west2 region.
Incident began at 2026-10-19 23:00 and ended at 2026-10-20 05:10 (all times are US/Pacific).Incident Report Summary On Monday, 19 Oct 2026 (Tuesday, 20 Oct BST), a data center facility that hosts europe-west2-b, experienced an external electrical power disruption. This resulted in service unavailability for workloads located in this zone. As traffic was redirected to alternative cloud regions or unaffected zones within europe-west2 cloud region, these workloads experienced transient latency and...
Akamai - Perfromance Degradation for Customers in Mumbai and Chennai
Oct 27, 13:09 UTC Investigating - On October 27, 2026, between 08:05 UTC and 10:45 UTC customers using services in Mumbai and Chennai may have experienced performance degradation. This occurred due to packet loss within an upstream provider’s network. As of 10:45 UTC the loss has subsided, and we are no longer seeing degraded performance in the affected regions. We have been monitoring for recurrence, and will continue to do so for the next few hours.If you have questions or are still experienc...