AI Security Digest
Aggregated ecosystem risk analysis
Vendor Watchlist
Tracking 0 critical integrations
Threat Stream Feed
Real-time security logs and system alerts
AWS - Service impact: Increased invoke error rates
Between 7:27 AM and 8:47 AM PDT, and between 10:47 AM and 4:15 PM PDT, we experienced intermittent invoke error rates and latencies for HTTP APIs in the US-WEST-2 Region. During this time, customers would have observed increased latency or errors when invoking HTTP APIs, with elevated errors occurring between 3:12 PM and 3:45 PM PDT. This represented the period of highest customer impact with the majority of affected customers experiencing errors or increased latencies during this window. Majori...
Plaid - Maintenance: [Wells Fargo] Scheduled Maintenance
Status: ScheduledWells Fargo is planning maintenance on its Account Statements API from 1 November 06:00 UTC to 1 November 11:00 UTC. During this five-hour window, statement retrieval may be intermittently unavailable.Affected components API - Production (Under maintenance)
SendGrid - SMS Delivery Delays from Twilio to Altice United States
Oct 29, 17:11 PDT Identified - Twilio customers may be experiencing SMS delivery delays from Twilio to Altice network subscribers in the United States. Our team has identified the cause, and is working to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available. Oct 29, 17:10 PDT Investigating - Twilio customers may be experiencing SMS delivery delays from Twilio to Altice network subscribers in the United States. Our team is actively invest...
Twilio - SMS Delivery Delays from Twilio to Altice United States
Oct 29, 17:11 PDT Identified - Twilio customers may be experiencing SMS delivery delays from Twilio to Altice network subscribers in the United States. Our team has identified the cause, and is working to resolve the issue. We will provide another update in 1 hour or as soon as more information becomes available. Oct 29, 17:10 PDT Investigating - Twilio customers may be experiencing SMS delivery delays from Twilio to Altice network subscribers in the United States. Our team is actively invest...
SendGrid - Poland SMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 29, 16:00 - 21:00 PDT Oct 28, 14:21 PDT Scheduled - Our SMS carrier partner in Poland is conducting a planned maintenance from 29 October 2026 at 16:00 PDT until 29 October 2026 at 21:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Poland handsets.
Twilio - Poland SMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 29, 16:00 - 21:00 PDT Oct 28, 14:21 PDT Scheduled - Our SMS carrier partner in Poland is conducting a planned maintenance from 29 October 2026 at 16:00 PDT until 29 October 2026 at 21:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Poland handsets.
SendGrid - Portugal SMS Carrier Partner Maintenance
Oct 29, 15:31 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 29, 04:37 PDT Scheduled - Our SMS carrier partner in Portugal is conducting a planned maintenance from 29 October 2026 at 15:30 PDT until 29 October 2026 at 17:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Portugal handsets.We are aware of the short notice and are working with our Carrier Partners to provide earlier no...
Twilio - Portugal SMS Carrier Partner Maintenance
Oct 29, 15:31 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 29, 04:37 PDT Scheduled - Our SMS carrier partner in Portugal is conducting a planned maintenance from 29 October 2026 at 15:30 PDT until 29 October 2026 at 17:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Portugal handsets.We are aware of the short notice and are working with our Carrier Partners to provide earlier no...
Twilio - United Kingdom Account Security Carrier Partner Maintenance - Vodafone
Oct 29, 15:30 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 29, 05:38 PDT Scheduled - Our carrier partner Vodafone United Kingdom is conducting a planned maintenance from 29 October 2026 at 15:30 PDT until 29 October 2026 at 22:15 PDT. During the maintenance window, there could be intermittent API request failures for Vodafone United Kingdom customers.Impacted Products: Legacy Identity MatchAndAttributes, Lookup Identity MatchWe ar...
SendGrid - United Kingdom Account Security Carrier Partner Maintenance - Vodafone
Oct 29, 15:30 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 29, 05:38 PDT Scheduled - Our carrier partner Vodafone United Kingdom is conducting a planned maintenance from 29 October 2026 at 15:30 PDT until 29 October 2026 at 22:15 PDT. During the maintenance window, there could be intermittent API request failures for Vodafone United Kingdom customers.Impacted Products: Legacy Identity MatchAndAttributes, Lookup Identity MatchWe ar...
Twilio - SMS Delivery Receipt Delays from Twilio to Multiple Networks in Multiple Countries Across Africa and Asia
Oct 29, 15:18 PDT Resolved - The incident has been resolved and SMS delivery receipts from Twilio to network subscribers on affected networks in multiple countries across Africa and Asia are operating normally. Oct 29, 13:17 PDT Monitoring - We have observed a recovery in SMS delivery receipts from Twilio to Multiple Countries Across Africa and Asia and are monitoring service stability. We will provide another update in 2 hours or as soon as more information becomes available. Oct 29, 12:14...
SendGrid - SMS Delivery Receipt Delays from Twilio to Multiple Networks in Multiple Countries Across Africa and Asia
Oct 29, 15:18 PDT Resolved - The incident has been resolved and SMS delivery receipts from Twilio to network subscribers on affected networks in multiple countries across Africa and Asia are operating normally. Oct 29, 13:17 PDT Monitoring - We have observed a recovery in SMS delivery receipts from Twilio to Multiple Countries Across Africa and Asia and are monitoring service stability. We will provide another update in 2 hours or as soon as more information becomes available. Oct 29, 12:14...
Twilio - Russia SMS Carrier Maintenance - Gazprombank Mobile
Oct 29, 14:00 PDT Completed - The scheduled maintenance has been completed. Oct 29, 13:01 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 26, 06:48 PDT Scheduled - The Gazprombank Mobile network in Russia is conducting a planned maintenance from 29 October 2026 at 13:00 PDT until 29 October 2026 at 14:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to Gazprombank Mobile Russia handsets.
SendGrid - Russia SMS Carrier Maintenance - Gazprombank Mobile
Oct 29, 14:00 PDT Completed - The scheduled maintenance has been completed. Oct 29, 13:01 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 26, 06:48 PDT Scheduled - The Gazprombank Mobile network in Russia is conducting a planned maintenance from 29 October 2026 at 13:00 PDT until 29 October 2026 at 14:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to Gazprombank Mobile Russia handsets.
Twilio - Japan SMS Carrier Partner Maintenance
Oct 29, 13:00 PDT Completed - The scheduled maintenance has been completed. Oct 29, 12:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 15, 04:17 PDT Scheduled - Our SMS carrier partner in Japan is conducting a planned maintenance from 29 October 2026 at 12:00 PDT until 29 October 2026 at 13:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to NTT docomo Japan handsets.
SendGrid - Russia SMS Carrier Maintenance - MegaFon
THIS IS A SCHEDULED EVENT Oct 29, 13:00 - 17:00 PDT Oct 27, 16:11 PDT Scheduled - The MegaFon network in Russia is conducting a planned maintenance from 29 October 2026 at 13:00 PDT until 29 October 2026 at 17:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to MegaFon Russia handsets.
Twilio - Russia SMS Carrier Maintenance - MegaFon
THIS IS A SCHEDULED EVENT Oct 29, 13:00 - 17:00 PDT Oct 27, 16:11 PDT Scheduled - The MegaFon network in Russia is conducting a planned maintenance from 29 October 2026 at 13:00 PDT until 29 October 2026 at 17:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to MegaFon Russia handsets.
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthropic said on October 27 that its AI model wrote an exploit that uses the flaw to let a remote attacker with no credentials run commands as root on Linux servers with a
Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim to be desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude Opus, only to deliver a malware family called
Datadog - The Datadog US1 Status Page Is Changing on October 29 2026.
Oct 29, 11:00 EDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 28, 10:47 EDT Update - We will be undergoing scheduled maintenance during this time. Oct 15, 17:49 EDT Scheduled - Datadog’s US1 status page is changing. Starting on October 29 2026, we’ll have a whole new look and experience based on Datadog’s own Status Pages product: https://docs.datadoghq.com/incident_response/status_pages/ The new Datadog status page will be accessi...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerability These types of vulnerabilities are a frequent attack vecto...
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
GitHub has announced that it's introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time. "The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate," GitHub said. The feature, which currently supports only npm packages, is available in public preview
GitHub - Disruption with Copilot Cloud services
Oct 29, 10:22 UTC Update - We are experiencing increased failures and latency on our agent sessions service, including creating and listing sessions. This can impact cloud based agent sessions on web, mobile, VS Code, CLI and the GitHub Copilot app. Oct 29, 10:19 UTC Investigating - We are investigating reports of impacted performance for some GitHub services.
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project's own GitLab server a week after GitLab released a fix, Alpine Linux said on 28 October. The flaw, CVE-2026-97229 (CVSS score: 10.0), can let an attacker run code on a GitLab server through a crafted regular expression in a CI configuration. Alpine found no evidence that the attack worked but
Loggly - Indexing Delay
Oct 29, 01:09 PDT Investigating - Our monitoring has detected an issue causing delayed data indexing for a small subset of customers. Some users may experience delays before new data appears in search and dashboards. We are actively working on a resolution and will provide updates as they become available.
Optimizely - Optimizely Digital Experience Platform (DXP) - TLS 1.0 and 1.1 Deprecation for Apex Domain Redirects
Oct 29, 08:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 14, 13:08 UTC Scheduled - Schedule:* Date range: October 29, 2026 - November 6, 2026 * Daily window: 8:00 UTC - 12:00 UTC Between October 29, 2026 and November 6, 2026, we will be performing scheduled maintenance to enhance our TLS security configuration. During this period, maintenance will be conducted daily between 8:00 UTC and 12:00 UTC. As part of this update, we will...
SendGrid - United States and Canada Twilio SMS and MMS Maintenance
Oct 29, 00:02 PDT Completed - The scheduled maintenance has been completed. Oct 28, 20:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 4, 00:24 PDT Scheduled - Twilio is conducting a planned maintenance from 28 October 2026 at 20:00 PDT until 29 October 2026 at 00:00 PDT. During the maintenance window, there could be intermittent delays or failures delivering SMS and MMS to and from United States and Canada handsets when sendin...
Twilio - United Kingdom Account Security Carrier Partner Maintenance - Three
THIS IS A SCHEDULED EVENT Oct 29, 00:00 - 04:00 PDT Oct 26, 02:59 PDT Scheduled - Our carrier partner Three United Kingdom is conducting a planned maintenance from 29 October 2026 at 00:00 PDT until 29 October 2026 at 04:00 PDT. During the maintenance window, there could be intermittent API request failures for Three United Kingdom customers.Impacted Products: Lookup SIM Swap, Legacy Identity MatchAndAttributes
SendGrid - United Kingdom Account Security Carrier Partner Maintenance - Three
THIS IS A SCHEDULED EVENT Oct 29, 00:00 - 04:00 PDT Oct 26, 02:59 PDT Scheduled - Our carrier partner Three United Kingdom is conducting a planned maintenance from 29 October 2026 at 00:00 PDT until 29 October 2026 at 04:00 PDT. During the maintenance window, there could be intermittent API request failures for Three United Kingdom customers.Impacted Products: Lookup SIM Swap, Legacy Identity MatchAndAttributes
Rippling - Issues editing Supergroups
Oct 29, 06:48 UTC Identified - Users without super-admin privileges can’t edit supergroups. We’re deploying a fix.
Twilio - Gateway API (Lookup API) Failure Increase on Verizon in United States
Oct 28, 23:34 PDT Investigating - Twilio customers may be experiencing failure responses for Lookup API transactions on Verizon in the United States. Our team is actively investigating the issue. We will provide another update in 1 hour or as soon as more information becomes available.
SendGrid - Gateway API (Lookup API) Failure Increase on Verizon in United States
Oct 28, 23:34 PDT Investigating - Twilio customers may be experiencing failure responses for Lookup API transactions on Verizon in the United States. Our team is actively investigating the issue. We will provide another update in 1 hour or as soon as more information becomes available.
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as Warp Panda in attacks targeting the U.S. legal sector. The vulnerability in question is CVE-2026-41709 (CVSS score:
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. "Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the internet," the network security company said in an update to its advisory. The vulnerabilities, tracked as
Snowflake - INC20000319
Oct 29, 04:29 UTC Investigating - Current status: We're investigating an issue with Snowflake Data Cloud. We'll provide an update within 60 minutes.Customer experience: Customers hosted in the specified regions may experience delays or intermittent failures when resuming or managing virtual warehouses. Existing warehouses that are already running may be unaffected. Additionally, serverless tasks may take longer than expected to run.Impact start time: 03:00 UTC October 29, 2026
Twilio - Sendgrid Maintenance Impacting Delivery and Account Configuration
THIS IS A SCHEDULED EVENT Oct 28, 21:00 - 22:30 PDT Oct 26, 15:03 PDT Update - This maintenance has been rescheduled. We are upgrading our infrastructure on October 28 2026, from 21:00 to 22:30 PDT to enhance system stability and scalability.During this window customers may experience delays impacting the following functionalities:- Email delivery for new sign-ups and upgraded accounts- Account configuration and settings updates- Processing of group unsubscribes- Dedicated IP and IP pool change...
SendGrid - Sendgrid Maintenance Impacting Delivery and Account Configuration
THIS IS A SCHEDULED EVENT Oct 28, 21:00 - 22:30 PDT Oct 26, 15:03 PDT Update - This maintenance has been rescheduled. We are upgrading our infrastructure on October 28 2026, from 21:00 to 22:30 PDT to enhance system stability and scalability.During this window customers may experience delays impacting the following functionalities:- Email delivery for new sign-ups and upgraded accounts- Account configuration and settings updates- Processing of group unsubscribes- Dedicated IP and IP pool change...
SendGrid - United States SMS and MMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 28, 21:00 PDT - Oct 29, 01:00 PDT Oct 26, 16:08 PDT Scheduled - Our SMS and MMS carrier partner in the United States is conducting a planned maintenance from 28 October 2026 at 21:00 PDT until 29 October 2026 at 01:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS and MMS to and from United States handsets via subset of United States short codes.
Twilio - United States SMS and MMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 28, 21:00 PDT - Oct 29, 01:00 PDT Oct 26, 16:08 PDT Scheduled - Our SMS and MMS carrier partner in the United States is conducting a planned maintenance from 28 October 2026 at 21:00 PDT until 29 October 2026 at 01:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS and MMS to and from United States handsets via subset of United States short codes.
SendGrid - United States SMS Carrier Maintenance - Verizon
THIS IS A SCHEDULED EVENT Oct 28, 21:00 - 22:00 PDT Oct 19, 23:06 PDT Scheduled - The Verizon network in the United States is conducting a planned maintenance from 28 October 2026 at 21:00 PDT until 28 October 2026 at 22:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Verizon United States handsets.
Twilio - United States SMS Carrier Maintenance - Verizon
THIS IS A SCHEDULED EVENT Oct 28, 21:00 - 22:00 PDT Oct 19, 23:06 PDT Scheduled - The Verizon network in the United States is conducting a planned maintenance from 28 October 2026 at 21:00 PDT until 28 October 2026 at 22:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to and from Verizon United States handsets.
Twilio - Flex Agent Copilot Note Generation Issues
Oct 28, 20:50 PDT Investigating - We are investigating an issue affecting Flex Agent Copilot, where auto-generation of notes is currently failing for a subset of customers. Other Flex features remain operational, and our engineering team is actively working to resolve the failure. We will provide our next update in 1 hour or as soon as more details become available.
SendGrid - Flex Agent Copilot Note Generation Issues
Oct 28, 20:50 PDT Investigating - We are investigating an issue affecting Flex Agent Copilot, where auto-generation of notes is currently failing for a subset of customers. Other Flex features remain operational, and our engineering team is actively working to resolve the failure. We will provide our next update in 1 hour or as soon as more details become available.
SendGrid - United States SMS and MMS Carrier Partner Maintenance
Oct 28, 20:02 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 29, 08:15 PDT Scheduled - Our SMS and MMS carrier partner in the United States is conducting a planned maintenance from 28 October 2026 at 20:00 PDT until 29 October 2026 at 00:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS and MMS to United States handsets via subset of United States long codes.
SendGrid - Russia SMS Carrier Maintenance - MTS
Oct 28, 20:01 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 27, 09:58 PDT Scheduled - The MTS network in Russia is conducting a planned maintenance from 28 October 2026 at 20:00 PDT until 28 October 2026 at 21:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to MTS Russia handsets.
Twilio - United States and Canada Twilio SMS and MMS Maintenance
THIS IS A SCHEDULED EVENT Oct 28, 20:00 PDT - Oct 29, 00:00 PDT Sep 4, 00:24 PDT Scheduled - Twilio is conducting a planned maintenance from 28 October 2026 at 20:00 PDT until 29 October 2026 at 00:00 PDT. During the maintenance window, there could be intermittent delays or failures delivering SMS and MMS to and from United States and Canada handsets when sending via long codes, short codes and toll free numbers.
Twilio - Russia SMS Carrier Maintenance - MTS
THIS IS A SCHEDULED EVENT Oct 28, 20:00 - 21:00 PDT Oct 27, 09:58 PDT Scheduled - The MTS network in Russia is conducting a planned maintenance from 28 October 2026 at 20:00 PDT until 28 October 2026 at 21:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS to MTS Russia handsets.
Twilio - United States SMS and MMS Carrier Partner Maintenance
THIS IS A SCHEDULED EVENT Oct 28, 20:00 PDT - Oct 29, 00:00 PDT Sep 29, 08:15 PDT Scheduled - Our SMS and MMS carrier partner in the United States is conducting a planned maintenance from 28 October 2026 at 20:00 PDT until 29 October 2026 at 00:00 PDT. During the maintenance window, there could be intermittent delays delivering SMS and MMS to United States handsets via subset of United States long codes.
[CISA KEV] CVE-2026-97229: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Product: Community Edition and Enterprise Edition by GitLab Description: GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation. Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Loggly - Indexing Delay
Oct 28, 15:38 PDT Update - We're continuing to investigate the issue. More updates will be published in two hours. Oct 28, 14:38 PDT Update - We're continuing to investigate the issue. More updates will come in one hour. Oct 28, 13:35 PDT Investigating - Our engineers have identified an issue with log ingestion starting at 12:50:32 PDT. All customer data continues to be collected and stored, but indexing of all customer data is being delayed. Customer data from after this time will not appe...
HashiCorp - Maintenance: HCP Terraform Scheduled Maintenance
Status: ScheduledHCP Terraform and HCP Waypoint will undergo scheduled maintenance on Saturday December 5th 2026, beginning at 17:00 UTC. This maintenance is necessary to improve performance and increase capacity. We expect this maintenance to complete in under 2.5 hours. These services will be unavailable until maintenance completes. Customers will not be able to manually or automatically trigger Terraform operations during maintenance. Updates will be posted as necessary throughout the main...
Plaid - Maintenance: [Chase] Scheduled Maintenance
Status: ScheduledChase is planning maintenance from 1 November 05:00 UTC to 1 November 07:00 UTC. During this window, we expect up to 120 minutes of downtime for Item adds, API calls, and scheduled updates.Affected components API - Production (Under maintenance)
CircleCI - Delays for gen2 dedicated IP range jobs
Oct 28, 18:51 UTC Identified - We’ve identified the cause as limited compute availability from our cloud provider, and we are working to free up additional capacity for these jobs to restore normal start times. We'll provide another update again shortly. Oct 28, 18:15 UTC Investigating - We are investigating delays in starting docker gen2 jobs that use dedicated IP ranges. Jobs are currently delayed by about 10 minutes.No other resource classes are impacted at this time. We will continue to p...
Datadog - Metrics query are disrupted
Oct 28, 18:39 UTCResolved - The issue is now resolved. Oct 28, 18:23 UTCMonitoring - We are monitoring the issue. Oct 28, 18:09 UTCMonitoring - We are monitoring the issue. Oct 28, 17:26 UTCIdentified - We identified the issue. Oct 28, 16:56 UTCInvestigating - We are investigating the issue. Oct 28, 16:40 UTCInvestigating - We are investigating the issue. Oct 28, 16:10 UTCInvestigating - We are investigating metrics issues. As a result, some users might not be able to load dashboard or query met...
Optimizely - Content Graph Performance Degredation
Oct 28, 17:27 UTC Monitoring - Content Graph experienced http 500 and 404 errors, which we have remediated. We are continuing to monitor the health of the service closely.
CVE Intel update - The open-source CVE triage tool.
Last week I posted CVE Intel here and got really good advice. Thank you all. Here's what's new since then. (original post: https://www.reddit.com/r/cybersecurity/comments/1x8v176/opensource_cve_triage_in_one_place_kev_epss_nvd/) Quick what: CVE Intel is an open-source tool that pulls CVE data from NVD, CISA KEV, EPSS, OSV and public exploit sources into one place. It runs as a desktop app, CLI, RE...
Datadog - Metrics query are disrupted
Oct 28, 12:56 EDT Update - We are investigating the issue. Oct 28, 12:40 EDT Update - We are investigating the issue. Oct 28, 12:10 EDT Investigating - We are investigating metrics issues. As a result, some users might not be able to load dashboard or query metrics.Please note that data processing and alerts are not affected by this incident.
Supabase - Delayed Log Delivery from 14:10 - 15:30 UTC
Status: MonitoringBetween 14:10 - 15:30 UTC we have experienced an issue in delivering logs, leading to a delay of about 7–8 minutes. Most affected events have now been recovered - a small subset of events is still being re-inserted and we will confirm once completed.Affected components Logging & Observability (Degraded performance)
Tailscale Releases Emergency Fix for “Tailworm” SSH Flaws
Tailscale released version 1.104.4 after researchers demonstrated privilege-escalation vulnerabilities in Tailscale SSH. An attacker with access to an already-authorized device could potentially gain elevated privileges on reachable systems. A compromised machine could become a stepping stone into other servers permitted by SSH policy. This is not an unauthenticated Internet-wide worm. Updat...
Rippling - QuickBooks data import delayed for some customers
Oct 28, 15:57 UTC Investigating - We are experiencing delays importing data from QuickBooks for some customers
GitHub - Disruption with some Copilot services
Oct 28, 14:55 UTC Update - We are experiencing degraded availability for the GPT-5.3-Codex, GPT-5.6 Luna, GPT-6.1 Sol, GPT-5.6 Terra, GPT-6 Luna, and MAI Code 1.1 Flash models in Copilot products and IDE surfaces. We have identified the root cause and working to apply a mitigation. While we work to resolve the issue we recommend choosing another model to continue using Copilot. Oct 28, 14:33 UTC Update - We are experiencing degraded availability for the GPT-5.3-Codex, GPT-5.6 Luna, GPT-6.1 So...
Zoom - Service Degradation Affecting the Evaluations Acknowledge Button in Zoom Quality Management in the US Region
Oct 28, 07:31 PDT Identified - We have successfully identified the root cause of the missing evaluations acknowledge button in Zoom Quality Management reports in the US region.Our team is actively working on a resolution, and we will keep you informed with timely updates as progress is made. Thank you for your patience.
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows - CVE-2026-104351 (CVSS score: 9.9) - A code injection vulnerability that could lead to arbitrary code execution.
Heroku - Heroku Feature Degradation
Node.js builds are currently experiencing elevated error rates due to issues with an upstream dependency.
Xero - Global: Xero - customers are experiencing issues across Xero
Oct 28, 09:58 UTC Monitoring - Our team has implemented a fix and we are currently monitoring the results. Oct 28, 09:33 UTC Identified - We're aware that customers are experiencing errors across Xero after logging in. We have identified the cause of the issue and are implementing a fix. This is our top priority and we will update you as soon as we can.
New Relic - NGEP API internal JP down
Oct 28, 09:42 UTC Resolved - EndImpact triggered Oct 28, 09:35 UTC Update - We are investigating an issue in the JP region affecting the Next Gen Entity Platform (NGEP) where some customers may be unable to view or manage entities. Our engineering teams are engaged and are actively working to resolve the issue. Oct 28, 09:33 UTC Investigating - We are investigating an issue in the JP region affecting the Next Gen Entity Platform (NGEP) where some customers may be unable to view or manage en...
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
submitted by /u/One_Paint8721 [link] [comments]
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after the model was prompted, not seen in any real attack, and Anthropic reported every flaw to the vendor first, so all of them are already patched. One proof of
Rippling - Rippling AI is down
Oct 28, 06:55 UTC Resolved - Rippling AI is fully recovered. Oct 28, 06:50 UTC Monitoring - We deployed a fix and the system has started to recover. Full recovery is rolling out. Oct 28, 06:44 UTC Identified - Rippling AI is not responding to user queries. We identified the root cause and are remediating the problem.
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background process carries out with root privileges. To use them, an attacker must
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-111497 (CVSS score: 9.2) - An unchecked return value vulnerability in
Amplitude - Planned Data Processing Maintenance - US Data Center
Oct 27, 16:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 22, 16:43 PDT Scheduled - From 23:00 Oct 27 to 01:00 Oct 28 UTC, we will be performing maintenance on components of the core ingestion infrastructure in our US data center.During this time, customers may see data processing delays. No data loss is expected during the maintenance.The EU data center won't be affected.
DigitalOcean - Kubernetes Cluster Management Operations
Oct 27, 22:14 UTC Investigating - Our Engineering team is currently investigating an issue affecting Managed Kubernetes cluster operations.During this time, Customers may experience delays or failures when attempting to create, delete, scale, or upgrade clusters, as well as with other management tasks.Existing workloads running on Managed Kubernetes are not affected and will continue to operate normally.Our Engineering team is actively investigating and treating this with the highest priority. ...
ActiveCampaign - Delayed Processing for Imports, Exports, Bulk Actions, and Campaign sending.
Oct 27, 13:54 CDT Resolved - This incident has been resolved. Oct 27, 13:34 CDT Update - We are continuing to monitor for any further issues. Oct 27, 13:32 CDT Monitoring - Delays should be resolved. Engineers are activity monitoring. Oct 27, 13:20 CDT Update - We are continuing to investigate this issue. Oct 27, 13:19 CDT Investigating - Some customers may experience delays with imports, exports, bulk actions, and campaign sending.
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
CISA has added CVE-2026-109618 and CVE-2026-109619 to its Known Exploited Vulnerabilities catalog. Federal civilian agencies have been directed to remediate the vulnerabilities by October 29. There is an important correction to earlier reporting. Palo Alto Networks Unit 42 retracted its claim that PHP2Shell caused a European government agency compromise. Researchers confirmed that an attack...
Optimizely - Asset uploads failing in Optimizely CMP and DAM
Oct 27, 15:51 UTC Investigating - We're aware of an issue where uploads are failing in Optimizely Content Marketing Platform (CMP) and Digital Asset Management (DAM). Users trying to upload assets may see an "Upload Error" message, and the upload won't finish.Our Engineering team is investigating right now and is working to find the cause and restore normal upload behavior as quickly as possible.We'll post more details on the investigation soon. We apologize for the disruption and thank you for...
GCP - RESOLVED: Multiple services were experiencing issues in the europe-west2 region.
Incident began at 2026-10-19 23:00 and ended at 2026-10-20 05:10 (all times are US/Pacific).Incident Report Summary On Monday, 19 Oct 2026 (Tuesday, 20 Oct BST), a data center facility that hosts europe-west2-b, experienced an external electrical power disruption. This resulted in service unavailability for workloads located in this zone. As traffic was redirected to alternative cloud regions or unaffected zones within europe-west2 cloud region, these workloads experienced transient latency and...
Akamai - Perfromance Degradation for Customers in Mumbai and Chennai
Oct 27, 13:09 UTC Investigating - On October 27, 2026, between 08:05 UTC and 10:45 UTC customers using services in Mumbai and Chennai may have experienced performance degradation. This occurred due to packet loss within an upstream provider’s network. As of 10:45 UTC the loss has subsided, and we are no longer seeing degraded performance in the affected regions. We have been monitoring for recurrence, and will continue to do so for the next few hours.If you have questions or are still experienc...
RLSA-2026:89732: Grafana Labs Vulnerability
Important: grafana security update
Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perform arbitrary operations (CVE-2026-16438), resulting in information disclosure, tampering with, destruction, or deletion of information, and a denial-of-service (DoS) condition of the system. The foll...
EPICS Base
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code. The following versions of EPICS Base are affected: EPICS Base release <=7.0.10 (CVE-2026-114595, CVE-2026-114596, CVE-2026-114597, CVE-2026-114598) CVSS Vendor Equipment v3...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-111497 Google Brotli Unchecked Return Value Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and p...
Akamai - Enterprise Application Access (EAA) Connector Issues
Oct 27, 09:58 UTC Investigating - We are investigating an issue with Enterprise Application Access that is affecting a subset of Unified EAA Connectors. This issue began on October 27, 2026, at approximately 01:25 UTC. We are working on implementing the fix for the issue and will provide another update within the next 120 minutes. We will soon be posting more details for customers and partners with a valid Control Center login at https://community.akamai.com/customers/s/feed/0D5a700001bU4YFCA0....
OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections
OpenAI's compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model's hidden reasoning out in plain text, security firm Xint has shown. OpenAI's reasoning models work through a problem before answering, and the service normally returns only the raw reasoning as an encrypted item the user cannot read. The method got past
GitHub - Elevated 404s for GitHub App s2s tokens in git/API
Oct 27, 08:00 UTC Resolved - Between 0655 and 0801 UTC on 10/27, customers experienced increased failure rates for API and git requests authenticated with server-to-server tokens for GitHub Apps (excluding Actions tokens). During this window, authenticated git operations mistakenly returned 404 for 1.24% (2.6x) of requests on average and 2.49% (5.3x) at peak.These failures were caused by a scheduled maintenance event where GitHub migrated 7 tables between two MySQL clusters in our IAD and Azure...
Netlify - Elevated Build Errors and Agent Runner failures
Oct 27, 07:48 UTC Investigating - We are investigating elevated build failures and Agent Runner failures.
[CISA KEV] CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
Product: Commerce and Magento by Adobe Description: Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Amplitude - Data Ingestion Delays
Oct 26, 16:52 PDT Investigating - We are currently investigating an issue causing delays in data ingestion. Some customers may experience delays in their events appearing in Amplitude.Our Engineering team is actively investigating the issue and working to restore normal ingestion.We apologize for the inconvenience and will provide updates as more information becomes available.
Xero - Global: Xero - some customers may be experiencing intermittent errors in Xero.
Oct 26, 23:26 UTC Monitoring - Our team has implemented a fix and we are currently monitoring the results. Oct 26, 23:08 UTC Identified - We're aware some customers are experiencing some intermittent errors in Xero. We've identified the cause of this issue and are taking action to correct it. We apologise for any inconvenience this is causing.
LaunchDarkly - delayed event processing
Oct 26, 13:52 PDT Resolved - A scaling inflection point in our realtime event warehouse led to a delay for some event ingestion. The engineering team has remediated the problem and all events should be caught up.Some customers may have seen delays in experiments and in guarded release processing.This is now resolved and the team will carefully monitor.
GitHub - Incident with Actions, Issues, API Requests and Pull Requests
Oct 26, 18:57 UTC Resolved - This incident has been resolved. Thank you for your patience and understanding as we addressed this issue. A detailed root cause analysis will be shared as soon as it is available. Oct 26, 18:54 UTC Update - We saw elevated latency affecting REST API requests, including Checks, and some Actions, Issues, Pull Requests, and GraphQL functionality. Some requests may have been slow or timed out, and notifications were delayed from 17:59 UTC - 18:40 UTC.We mitigated the...
Datadog - Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder
Oct 26, 18:23 UTCResolved - The issue is now resolved. Oct 26, 17:40 UTCMonitoring - We have deployed a fix and we are monitoring the results. We will provide another update once the issue is fully resolved. Oct 26, 17:31 UTCIdentified - We have identified the underlying issue and are working on a fix. Oct 26, 17:30 UTCIdentified - We have identified the underlying issue and are working on a fix. Oct 26, 17:26 UTCInvestigating - We are currently investigating an issue affecting Workflow Automati...
Datadog - Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder
Oct 26, 13:40 EDT Monitoring - We have deployed a fix and we are monitoring the results. We will provide another update once the issue is fully resolved. Oct 26, 13:31 EDT Update - We have identified the underlying issue and are working on a fix. Oct 26, 13:30 EDT Identified - We have identified the underlying issue and are working on a fix. Oct 26, 13:26 EDT Investigating - We are currently investigating an issue affecting Workflow Automation, App Builder, Bits Code, and Agent Builder in...
Netlify - Delays in build logs appearing in the UI
Oct 26, 16:05 UTC Investigating - We have identified an ongoing issue with an upstream service provider that may be contributing to delays in build logs appearing in the Netlify UI. We are in contact with the provider and are continuing to monitor the situation. We will provide further updates as more information becomes available.
Segment - Segment event delivery issues
Oct 26, 06:38 PDT Update - We are continuing to investigate this issue. Oct 26, 06:35 PDT Investigating - We have identified that a small no of event delivery is failing. We are currently investigating the issue.
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 sign-in events across
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an analysis by cloud security company Wiz. A GitHub safeguard that pauses
Amplitude - Scheduled Infrastructure Maintenance - US Data Center
Oct 25, 21:33 PDT Completed - Maintenance has been completed. All affected services are operating normally. Oct 25, 20:45 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct 25, 20:34 PDT Scheduled - We will be performing infrastructure maintenance in our US data center during this window. Some features may experience brief interruptions or intermittent errors. We will provide an update when maintenance is complete.
Plaid - Service Disruption Impacting Wells Fargo connections
Status: InvestigatingWells Fargo is currently experiencing downtime impacting all channels and data recipients. Item adds and API calls through Plaid are impacted. We will provide an update when Wells Fargo has resolved the issue.Affected components Dashboard (Partial outage) API - Production (Partial outage)
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
submitted by /u/One_Paint8721 [link] [comments]