AI Security Digest
Aggregated ecosystem risk analysis
Vendor Watchlist
Tracking 0 critical integrations
Threat Stream Feed
Real-time security logs and system alerts
Xero - Inland Revenue (NZ) Scheduled Maintenance 12th September 2026
THIS IS A SCHEDULED EVENT Sep 12, 01:00 - 10:30 UTC Sep 6, 20:54 UTC Scheduled - The Inland Revenue Department (IRD) is completing planned maintenance from 1pm to 10.30pm on Saturday 12 September 2026, NZST.During this time, customers will be unable to file GST returns, income tax returns or payday filings to IRD from Xero. You can complete filings to IRD as normal from 10.31pm Saturday 12 September 2026, NZST. Please note, you can continue to run and view GST, income tax returns and payruns d...
Cloudflare - Cloudflare Tunnel Availability Issues
Sep 11, 21:55 UTCInvestigating - Cloudflare is investigating issues with Cloudflare Tunnel. More updates to follow shortly.
Plaid - Maintenance: Chase Scheduled Maintenance
Status: ScheduledChase is planning maintenance from 12/09 21:00 UTC to 13/09 22:00 UTC. During this window, we expect intermittent errors for Item adds, API calls, and scheduled updates for Chase items.Affected components API - Production (Under maintenance)
Cloudflare - Network Performance Issues with Taiwan datacenter (TPE)
Sep 11, 19:35 UTCInvestigating - Cloudflare is investigating issues with Network Performance in Taiwan datacenter (TPE) We are working to analyze and mitigate this problem. More updates to follow shortly.
AI-Powered Security
AI-Powered Security AI is built into the SaaS apps you already run: Claude in your workflows, Now Assist inside ServiceNow, Agentforce across Salesforce. AppOmni defends this AI layer with the same SSPM principles that secures the rest of your SaaS environments, powered by AppOmni’s own AI. CHALLENGE AI is everywhere in SaaS, and most security […] The post AI-Powered Security appeared first on App...
Xero - HMRC system maintenance (MTD ITSA)
THIS IS A SCHEDULED EVENT Sep 11, 17:00 UTC - Sep 15, 13:00 UTC Aug 24, 12:24 UTC Scheduled - HMRC is undergoing scheduled system maintenance for the Making Tax Digital for Income Tax service from 17:00 on the 11th September 2026 until 13:00 on Tuesday the 15th September 2026.During this time the service will be unavailable.Please refer to the HMRC website for further information: https://www.gov.uk/government/publications/use-software-to-send-income-tax-updates-service-availability-and-issue...
Plaid - Statements API downtime
Status: InvestigatingOur Statements API, /statements/download, is currently experiencing unexpected downtime. We are actively investigating and working to mitigate this issue.
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure. The vulnerability in question is CVE-2026-85706 (CVSS score: 10.0), a path traversal issue in the repository commits API that could allow an unauthenticated user to read arbitrary files from the GitLab server under
Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks
Anthropic on Thursday said it identified and disrupted industrial-scale illicit distillation attacks against Claude from seven labs based in China, including Alibaba, Moonshot, DeepSeek, Z.ai (aka Zhipu), and MiniMax. Knowledge distillation by itself is a legitimate training method. It refers to a machine learning technique where a large, powerful AI model assumes the role of a "teacher" to
Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between December 2025 and August 2026. The threat actors, which the artificial intelligence (AI) company has branded Generative Threat Groups (GTGs), span state-sponsored groups, financially motivated criminals, commercial
Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection
Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve. The operation has been attributed to a cyber espionage group it calls GTG-20006 (where "GTG" stands for Generative Threat Group), which aligns with broader reporting linking the cluster to Midnight
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-85706 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) ...
Sumo Logic - Problem with Cloud SIEM Processing in Australia (AU)
Sep 11, 10:24 UTC Investigating - We are currently investigating reports of problems with Cloud SIEM Processing. Log security records may take longer than normal to become searchable after processing. Users may not receive data when running queries or viewing dashboards that depend on recently collected data and alerts may not dispatch. Users may also experience delayed insights and signal generation on the affected security records. We will provide more information soon.
Cloudflare - DFW (Dallas) on 2026-09-11
Sep 11, 08:15 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 11, 08:10 UTCScheduled - We will be performing scheduled maintenance in DFW (Dallas) datacenter on 2026-09-11 between 08:15 and 11:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, pl...
Snowflake - INC20000213
Sep 11, 07:44 UTC Update - Current status: We're continuing to investigate the issue with Snowflake Data Cloud. We'll provide another update within 30 minutes.Customer experience: Customers hosted in the specified regions may be unable to access or use multiple core Snowflake services and features. Affected users may be unable to sign in, execute queries, or manage data.ETA: An ETA is not yet available. We'll provide one as soon as possible.Incident start time: 05:00 UTC September 11, 2026 Se...
Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors
Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said in a report. Wiz saw the attacks between August 15 and September 8. JFrog had fixed both flaws before then, so only servers that had not been updated were open to them.
Cloudflare - Issues with Workers VPC hostname route resolution on 2026-09-11
Sep 11, 06:22 UTCResolved - An issue prevented Workers VPC from correctly resolving hostname routes for a small subset of accounts between 06:22 and 09:38 UTC on Friday, September 11th, 2026. This problem has been fully resolved, and all services are operating normally. During this timeframe, affected accounts may have experienced connection failures, timeouts, or routing errors when Workers VPC attempted to fetch requests via hostname routes. The issue was strictly limited to hostname route r...
Zoom - Zoom Push Notification Service Release: September, 2026 (No Operational Impact)
Sep 10, 22:30 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 8, 22:55 PDT Scheduled - We will be performing scheduled maintenance to upgrade our Push Notification Service.No operational impact is expected. This maintenance includes the following enhancements and improvements:- Activity center enhancement- Deployment process enhancementAll services are expected to operate normally during the maintenance window.
Cloudflare - EWR (Newark) on 2026-09-11
Sep 11, 04:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 10, 06:20 UTCScheduled - We will be performing scheduled maintenance in EWR (Newark) datacenter on 2026-09-11 between 05:00 and 10:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this...
Cloudflare - ORD (Chicago) on 2026-09-11
Sep 11, 04:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 9, 16:20 UTCScheduled - We will be performing scheduled maintenance in ORD (Chicago) datacenter on 2026-09-11 between 05:00 and 11:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting thi...
Heap - Heap Connect Sync Delays
Sep 10, 20:53 PDT Monitoring - A fix has been implemented and we are monitoring the results. Sep 10, 20:39 PDT Investigating - We are currently experiencing delays for Connect Syncs. Our engineering team is currently working to identify a root cause and implement a solution.We will post an update in 30 minutes.
Cloudflare - SSL Certificate Provisioning Delays for Let's Encrypt
Sep 11, 02:58 UTCIdentified - Let's Encrypt incident is now resolved. Cloudflare managed certificate backlog is still clearing.Sep 11, 02:20 UTCIdentified - Let's Encrypt are seeing SSL certificates provisioning delays. You can read their public status page here: https://letsencrypt.status.io/pages/incident/55957a99e800baa4470002da/6aa35c1d892d7304f2747e01 SSL certificates already in production and other CAs certificate provisioning remains unaffected and are operating normally.
MongoDB Atlas - Atlas is experiencing issues with issuing certificates from Lets Encrypt
Sep 11, 01:28 UTC Investigating - We are currently investigating issues related to certificate issuing failures with Lets Encrypt. Free and Flex cluster provisioning may be delayed.
GCP - RESOLVED: Multiple products in us-central1-b are experiencing network service degradation.
Incident began at 2026-09-01 07:44 and ended at 2026-09-01 11:52 (all times are US/Pacific).Incident Report Summary On Tuesday, 1 September 2026, some customers in us-central1 experienced network service degradation and instance isolation for a duration of 4 hours and 11 minutes. To our customers whose businesses were impacted during this disruption, we sincerely apologize. This is not the level of quality and reliability we strive to offer you, and we are taking immediate steps to improve the ...
CircleCI - Issues loading pipelines for a small number of projects
Sep 10, 20:26 UTC Resolved - This incident has been resolved. Sep 10, 20:25 UTC Monitoring - A fix has been implemented and we are monitoring the results. Sep 10, 20:25 UTC Identified - A small number of customers may see errors or be unable to load the pipelines page for projects with deprecated-config warnings, when using the classic pipelines view. Customers on the new pipelines view are not affected. We’ve identified the cause and deployed a fix.
Zoom - Service degradation affecting Zoom Meeting summary, and Phone call summary in the US region.
Sep 10, 11:38 PDT Resolved - This incident has been resolved. Sep 10, 11:22 PDT Monitoring - On 09/08/2026, Between 17:57 UTC to 23:49 UTC, A subset of users may have experienced issues with Meeting Summary and Phone Call Summary.This incident has been resolved and the affected services have been restored.
Akamai - Edge Delivery Increased Latency in US East (IAD)
Sep 10, 17:58 UTC Identified - We have identified the cause of the issue and are implementing a fix. We initially mentioned elevated 403 errors in this status page post as an additional symptom of the incident. That was incorrect, and we have removed the reference. Customers and partners can find more details on the Akamai Community: https://community.akamai.com/customers/s/feed/0D5a700001T8d9uCAB. We will provide another update within the next 60 minutes. Sep 10, 17:37 UTC Investigating - We...
Vercel - Elevated error rate on Connect and Passport
Sep 10, 17:42 UTC Investigating - We've identified an issue where some customers may experience increased errors from Connect and Passport. We are currently investigating this issue. We will provide additional updates as they become available.
Zoom - Service degradation affecting subset of live online meeting translation in Canada region.
Sep 10, 09:57 PDT Monitoring - On 09/10/2026, Between 13:10 UTC to 14:10 UTC, Users may have experienced issues with subset of live online meeting translation in Canada region. This incident has been resolved and the affected services have been restored.
Sentry - Ingestion is delayed in US
Sep 10, 16:52 UTC Update - We are continuing to monitor delayed ingestion. Sep 10, 16:13 UTC Investigating - We are investigating degraded ingestion in US.
Cloudflare - Issues Editing Bulk Redirects
Sep 10, 15:59 UTCIdentified - The issue has been identified and a fix is being implemented.Sep 10, 15:41 UTCInvestigating - Cloudflare is aware of and investigating an issue preventing users from adding new redirects to existing Bulk Redirects. Traffic processed by existing Bulk Redirects remains unaffected, and this issue is limited to the configuration of these rules. Further details will be provided as we investigate.
Zoom - Service Degradation Affecting Zoom Phone, Zoom Contact Center and Zoom Meetings in Europe
Sep 10, 08:57 PDT Update - We are continuing to monitor for any further issues. Sep 10, 08:53 PDT Monitoring - On 09/10/2026, Between 14:58 UTC to 15:02 UTC, Subset of users may have experienced issues with Zoom Phone and Zoom Contact Center in Europe. This incident has been resolved and the affected services have been restored.
Supabase - Unresponsive Projects
Sep 10, 15:46 UTC Identified - We have identified why projects are becoming unresponsive and are implementing a mitigation. Sep 10, 15:26 UTC Investigating - We are aware of Nano projects becoming unresponsive after a period of time, typically hours. We are investigating.
Sentry - Sentry.io elevated number of 500 errors
Sep 10, 15:25 UTC Identified - During migration to new control silo region we started to observe increased number of 500 errors. Migration procedure was rolled back.
Segment - SSO Login Issues with the Segment App
Sep 10, 07:28 PDT Investigating - We are actively investigating an issue in which some customers are unable to login to the Segment app via SSO.
Cloudflare - DNS Update Delays
Sep 10, 13:58 UTCInvestigating - Cloudflare is investigating delays in propagation of updates to DNS records. More updates to follow shortly.
HashiCorp - Hashicorp Linux packages GPG key rotation
Status: IdentifiedWe are currently updating documentation and package verification guidance following an ongoing GPG key rotation for all HashiCorp Linux packages. The fingerprint currently displayed on our site is outdated and may not match the active signing key. We are actively updating the published fingerprint information and related documentation. We will provide an update once the corrected fingerprint details are available.Affected components APT Repository (Partial...
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the patches by September 12, 2026. The vulnerabilities are listed below - CVE-2026-20079 (CVSS score: 10.0) - An authentication
Squarespace - Acuity Scheduling: scheduled maintenance
Sep 10, 06:00 EDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 9, 12:42 EDT Scheduled - Acuity Scheduling will be undergoing maintenance on Thursday, Sept 10 from 6-7am US Eastern time. The admin dashboard, client scheduling page, and other functionality will not be available.Data and existing appointments will remain untouched.
Cloudflare - LED (Saint Petersburg) on 2026-09-10
Sep 10, 10:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 10, 09:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 9, 14:00 UTCScheduled - We will be performing scheduled maintenance in LED (Saint Petersburg) datacenter on 2026-09-10 between 10:00 and 17:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-user...
Cloudflare - DEN (Denver) on 2026-09-10
Sep 10, 08:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 8, 14:40 UTCScheduled - We will be performing scheduled maintenance in DEN (Denver) datacenter on 2026-09-10 between 09:00 and 13:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this...
Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key
Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM's own setup guide. LiteLLM is an open-source AI gateway, the software a company puts between its applications and the model providers it pays for. That key is the gateway's administrator credential. Anyone who holds it can read every
Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6
Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model broke into real third-party systems, marking the latest in a growing list of cases that have raised concerns about the security risks posed by autonomous AI agents. The AI company said the incident dates back to January 2026 and involved an early version of Claude Opus 4.6 that breached "
Cloudflare - LAX (Los Angeles) on 2026-09-10
Sep 10, 07:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 10, 06:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 8, 18:50 UTCScheduled - We will be performing scheduled maintenance in LAX (Los Angeles) datacenter on 2026-09-10 between 07:00 and 15:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in ...
Cloudflare - PHX (Phoenix) on 2026-09-10
Sep 10, 06:30 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 10, 05:30 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 9, 10:00 UTCScheduled - We will be performing scheduled maintenance in PHX (Phoenix) datacenter on 2026-09-10 between 06:30 and 14:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...
Cloudflare - DFW (Dallas) on 2026-09-10
Sep 10, 05:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 9, 16:20 UTCScheduled - We will be performing scheduled maintenance in DFW (Dallas) datacenter on 2026-09-10 between 06:00 and 11:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this...
Amplitude - We are actively investigating an issue with our realtime ingestion pipelines.
Sep 9, 20:21 PDT Monitoring - A fix has been implemented and we are monitoring the results. Sep 9, 20:07 PDT Investigating - We are actively investigating an issue with our realtime ingestion pipelines. No data is lost.
Cloudflare - DUB (Dublin) on 2026-09-10
Sep 10, 01:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Aug 27, 13:20 UTCScheduled - We will be performing scheduled maintenance in DUB (Dublin) datacenter on 2026-09-10 between 02:00 and 05:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this...
Elastic Cloud - Organisation Owner role access to Elastic Cloud Hosted Kibana
Sep 10, 01:30 UTC Identified - We have identified and are in the process of fixing+mitigating a bug in our permissions management UI that is prevents users with the Organisation Owner role and Cloud Console, Elasticsearch, and Kibana access from accessing Kibana in Hosted Deployments.
Slack - Incident: Trouble loading Workspace-level Apps & Workflows settings page is returning blank pages
We've engaged our engineering team to assist in the investigation. We’re continuing to work on understanding the issue. We’ll provide an update in 30 minutes or sooner if more information becomes available.
any advice?
So i am making a github repo with links to bad sites and also we have warnings its so that stuff that come along in the future to help people stay safe from cyberattacks or hacks can blacklist sites that are not good. submitted by /u/Greyguy192 [link] [comments]
Cloudflare - MAA (Chennai) on 2026-09-10
Sep 10, 00:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 9, 23:01 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 8, 03:10 UTCScheduled - We will be performing scheduled maintenance in MAA (Chennai) datacenter on 2026-09-10 between 00:00 and 04:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...
Cloudflare - DUB (Dublin) on 2026-09-09
Sep 9, 22:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Aug 27, 13:20 UTCScheduled - We will be performing scheduled maintenance in DUB (Dublin) datacenter between 2026-09-09 23:00 and 2026-09-10 02:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expect...
Optimizely - Upgrade of Product Information Management (PIM), 9-10 September 2026
THIS IS A SCHEDULED EVENT Sep 9, 22:00 UTC - Sep 10, 04:00 UTC Aug 14, 09:39 UTC Scheduled - The Product Information Management (PIM) service will undergo a product upgrade, starting on September 9th at 22:00 (UTC) and ending at 04:00 (UTC) on September 10th (6 hour window, actual downtime is expected to be 30-60 minutes). For an estimated 30-60 minutes during the service window, the PIM application will be stopped and PIM tenants will not be able to log in and perform normal activities. This...
Cloudflare - AMS (Amsterdam) on 2026-09-09
Sep 9, 21:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 1, 08:10 UTCScheduled - We will be performing scheduled maintenance in AMS (Amsterdam) datacenter between 2026-09-09 22:00 and 2026-09-11 04:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are exp...
Snowflake - INC20000211
Sep 9, 21:53 UTC Investigating - Current status: We're investigating an issue with Snowflake Data Cloud. We'll provide an update within 30 minutes.Customer experience: Customers hosted in the specified regions may be unable to access or use multiple core Snowflake services and features. Affected users may be unable to sign in, execute queries, or manage data.Incident start time: 21:27 UTC September 09, 2026
Dropbox - Some customers are unable to access certain website routes and features.
Sep 9, 21:36 UTC Investigating - a number of pages and features are not working for some customers. We’re working to fix the problem as quickly as we can. We’ll share another update shortly.
1Password - Device Trust Service Disruption
Sep 9, 16:53 EDT Monitoring - We have identified the triggering change and have rolled it back. We are monitoring to confirm that this has completely resolved the issue. Sep 9, 16:43 EDT Investigating - We are currently investigating reports of an incident affecting Device Trust. Some customers may experience delays in device posture checks or authentication failures. We will provide an update as soon as we have more information.
Elastic Cloud - Elastic Agent enrollment/check-in failures on 9.5.3 (and 9.4.6) with Fleet remote Elasticsearch output
Sep 9, 20:44 UTC Identified - We've identified a bug in Fleet Server 9.5.3 (also present in 9.4.6) that can cause Elastic Agents to crash-loop and go offline when Fleet pushes a configuration update, including enrollment, a policy change, or a routine revision bump. This only affects policies that use Fleet's remote Elasticsearch output feature.Recommendation: If you use Fleet's remote Elasticsearch output, do not upgrade to 9.5.3 or 9.4.6 until a fixed version is available. If you're already ...
Amplitude - S3 export delivery permissions - Resolved
Sep 9, 13:32 PDT Resolved - Some S3 export files delivered between September 9 at 20:32 UTC and September 10 at 04:01 UTC were missing the bucket-owner-full-control permission, which prevented affected customers from reading them. The issue is resolved. Exports moving forward and outside this timeframe are not impacted. No data was lost.For impacted files in the affected timeframe, set your bucket's Object Ownership to Bucket owner enforced (disable ACLs), if compatible with your bucket access...
Cybersecurity statistics of the week (August 31st - September 6th)
Hi guys, I send out a weekly newsletter with the latest cybersecurity vendor reports and research, and thought you might find it useful, so sharing it here. All the reports and research below were published between August 31st - September 6th. You can get the below into your inbox every week if you want: https://www.cybersecstats.com/cybersecstatsnewsletter/ Application Security Mythos Readiness ...
Cloudflare - Workers Cron Triggers degraded
Sep 9, 19:18 UTCIdentified - The issue has been identified and a fix is being implemented.Sep 9, 19:17 UTCInvestigating - Workers Cron Triggers may not execute or may be delayed in executing. Updates to Workers Cron Triggers may take some time to take effect.
Monday.com - Investigating issues with Vibe app
Sep 9, 18:39 UTC Resolved - This incident has been resolved. Sep 9, 18:36 UTC Monitoring - A fix has been implemented and we are monitoring the results. Sep 9, 18:32 UTC Identified - The issue has been identified and a fix is being implemented. Sep 9, 18:21 UTC Investigating - We are currently experiencing issues related to vibe applications. Our dedicated team is working to resolve this as quickly as possible
Cloudflare - Increased HTTP Errors
Sep 9, 15:30 UTCResolved - Between 16:40 and 16:54 UTC, Cloudflare experienced an elevated rate of HTTP errors affecting traffic passing through Philadelphia (PHL). The issue has been fully identified and resolved, and impact to the PHL location is completely mitigated. All systems are operating normally.
Cloudflare - Cloudflare Workers AI increased errors
Sep 9, 14:25 UTCInvestigating - Cloudflare is aware of, and investigating, increased Workers AI errors when attempting to use GLM 5.3. Updates to follow.
Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA
Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create "stolen keys" that grant illicit access to tools from model providers like Google, Anthropic, and others. Information stealers like Lumma Stealer or Vidar are equipped to harvest a wide range of data from compromised systems. This can include credential, session tokens, and API
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability CVE-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability CVE-202...
DigitalOcean - Power Degradation impacting GPU Performance in ATL1
Sep 9, 10:47 UTC Investigating - We are investigating a power issue affecting part of our ATL1 datacenter. Redundant power systems are keeping servers online, and we have not observed any server outages.However, available power capacity is reduced, which may cause degraded performance for some GPU workloads, particularly during periods of high utilization.Our datacenter and infrastructure teams are working to restore full power redundancy. We will provide an update as more information becomes ...
Fortinet Privileged Access Agent: Any Site Could Control Your Proxy and Watch Your Tab
TL;DR. The FortiPAM Chrome extension (1M+ users), used for Privileged Access Management, allowed any site to set the browser's proxy for the session, alongside allowing any site to create a new tab and send screen recordings of it to an attacker's server. That makes for trivial phishing attacks which only require the user to view something sensitive in the attacker-opened tab. CVSS 9.1 | CVE-2026-...
Cloudflare - LUN (Lusaka) on 2026-09-09
Sep 9, 08:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 8, 10:41 UTCScheduled - We will be performing scheduled maintenance in LUN (Lusaka) datacenter on 2026-09-09 between 09:00 and 16:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this...
Supabase - Brief connection disruptions in us-east-1 (N. Virginia)
Sep 9, 08:47 UTC Resolved - Between 05:50–06:05 UTC some customer using Supavisor in us-east-1 may have experienced brief dropped connections or connection disruptions. This issue was caused by an unexpected restart of Supavisor instances in the affected cluster.We apologize for any disruption caused.
Cloudflare - YYC (Calgary) on 2026-09-09
Sep 9, 06:30 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 9, 05:30 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 8, 11:31 UTCScheduled - We will be performing scheduled maintenance in YYC (Calgary) datacenter on 2026-09-09 between 06:30 and 12:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...
Cloudflare - DFW (Dallas) on 2026-09-09
Sep 9, 06:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 9, 05:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 8, 15:40 UTCScheduled - We will be performing scheduled maintenance in DFW (Dallas) datacenter on 2026-09-09 between 06:00 and 11:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the a...
Cloudflare - IAD (Ashburn) on 2026-09-09
Sep 9, 04:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 8, 14:40 UTCScheduled - We will be performing scheduled maintenance in IAD (Ashburn) datacenter on 2026-09-09 between 05:00 and 11:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting thi...
Zoom - Service Degradation Affecting Zoom Services
Sep 8, 18:09 PDT Monitoring - The service degradation affecting Zoom Phone, Contact Center, Meetings has been successfully resolved. Our team will continue to monitor the situation closely and keep you informed of any further developments.
Cloudflare - MAA (Chennai) on 2026-09-09
Sep 9, 00:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 8, 23:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 7, 14:00 UTCScheduled - We will be performing scheduled maintenance in MAA (Chennai) datacenter on 2026-09-09 between 00:00 and 04:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...
[CISA KEV] CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Product: Multiple Products by Fortinet Description: Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets. Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Cloudflare - AMS (Amsterdam) on 2026-09-08
Sep 8, 21:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Aug 31, 04:00 UTCScheduled - We will be performing scheduled maintenance in AMS (Amsterdam) datacenter between 2026-09-08 22:00 and 2026-09-09 08:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are exp...
Cloudflare - Intermittent issues accessing the Dashboard on FireFox and Safari
Sep 8, 19:39 UTCInvestigating - Cloudflare is investigating intermittent issues accessing the Cloudflare Dashboard from Firefox and Safari browsers.
Cloudflare - PHL (Philadelphia) on 2026-09-08
Sep 8, 18:50 UTCScheduled - We will be performing scheduled maintenance in PHL (Philadelphia) datacenter between 2026-09-08 19:00 and 2026-09-09 17:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as...
Netlify - Elevated Errors and Latency in IAD Region
Sep 8, 18:28 UTC Resolved - We experienced increased errors and latency in the IAD region on our regular network between 15:50 and 17:45 UTC. This issue has been resolved.
Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files
An operator running a Redis cryptomining botnet left their entire working directory exposed on a server. Instead of the usual single payload, the whole toolkit was there: exploit code, raw campaign logs, a bundled Python runtime, even two exported Windows registry hives. That let us read their own campaign logs instead of guessing: 3,562 distinct Redis servers compromised, out of 12,966 tar...
Cloudflare - Errors in Unified Billing for some requests OpenAI models
Sep 8, 18:00 UTCResolved - Customers using Unified Billing may have seen a low number of requests to OpenAI models result in errors from 18:01 to 18:34UTC on 8th of September 2026
🚨 Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files
Researchers indexed an open directory on 188.245.99.156 (Hetzner) that held an operator's full Redis cryptomining toolkit, not just a payload. 147 files in total: Python exploit source, JSON campaign logs, a bundled portable Python 3.11 runtime, and two exported Windows registry hives. Because the raw campaign logs were sitting there, the numbers come from the operator's own per-host records, not ...
AIs as Modern Genies
This essay was written with Barath Raghavan, and originally appeared in Lawfare. In April, an artificial intelligence (AI) agent conducting a routine task at a company hit a snag, tried to solve it, and soon ended up deleting the company’s database along with all of its backups. In July, OpenAI asked an unreleased AI model to attempt a hacking test. Instead of staying in the isolated box the devel...
HubSpot - Some HubSpot tools may be unavailable for some users
Sep 8, 12:33 EDT Monitoring - We've addressed the issue that caused our CRM to be partially unavailable in North America since 11:46 AM EDT (UTC -04:00). We're monitoring performance closely to ensure all tools recover properly. Sep 8, 12:21 EDT Investigating - We are investigating an issue impacting some HubSpot tools. We will provide an update when we have more information.
Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution
A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026. Cybersecurity company CrowdStrike is tracking the Brazil-based activity cluster under the name Slim Spider. "The adversary demonstrates deep operational knowledge of Brazilian financial infrastructure, including the instant payment
HubSpot - Some HubSpot tools may be unavailable for some users
Sep 8, 11:57 EDT Investigating - We are investigating an issue impacting some HubSpot tools. We will provide an update when we have more information.
Squarespace - Acuity Scheduling / Client Scheduling Page showing "SORRY" error
Sep 8, 11:28 EDT Resolved - Some customers are seeing a "SORRY" page when accessing their Client Scheduling Page.
Cloudflare - CBR (Canberra) on 2026-09-08
Sep 8, 14:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 4, 20:21 UTCScheduled - We will be performing scheduled maintenance in CBR (Canberra) datacenter on 2026-09-08 between 15:00 and 18:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting th...
Cloudflare - FUK (Fukuoka) on 2026-09-08
Sep 8, 14:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 4, 20:31 UTCScheduled - We will be performing scheduled maintenance in FUK (Fukuoka) datacenter on 2026-09-08 between 15:00 and 18:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting thi...
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Executive summary China-based artificial intelligence (AI) companies are conducting systematic extraction of proprietary functionalities and capabilities of U.S. AI companies’ models through industrial-scale knowledge distillation campaigns that form the core—not merely a supplement—of their AI development strategy. While “distillation” is recognized as a legitimate and useful technique in AI rese...
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability CVE-2026-81963 Microsoft Windows Link Following Vulnerability CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerabili...
Stealing AI Reasoning Traces
Interesting research: “Stealing Reasoning Traces from Proprietary LLM APIs“: Abstract: Leading large language model providers now conceal their models’ step-by-step reasoning, or chain-of-thought, to protect intellectual property and limit information leakage. Rather than storing these traces server-side, providers return them to the client as blocks of encrypted text, which the client passes back...
Cloudflare - PHX (Phoenix) on 2026-09-08
Sep 6, 20:10 UTCScheduled - We will be performing scheduled maintenance in PHX (Phoenix) datacenter on 2026-09-08 between 10:00 and 13:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network inte...
Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
submitted by /u/sunychoudhary [link] [comments]
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has been codenamed StyleSmuggler by Sansec, which discovered zero-day exploitation starting September 4, 2026. "This update resolves a critical
Cloudflare - TXL (Berlin) on 2026-09-08
Sep 8, 07:50 UTCScheduled - We will be performing scheduled maintenance in TXL (Berlin) datacenter on 2026-09-08 between 08:00 and 17:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network inter...
Cloudflare - DFW (Dallas) on 2026-09-08
Sep 8, 07:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 7, 16:10 UTCScheduled - We will be performing scheduled maintenance in DFW (Dallas) datacenter on 2026-09-08 between 08:00 and 11:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this...
Optimizely - CMP Analytics Data Not Displaying
Sep 8, 07:34 UTC Identified - Customers using the CMP Analytics module may notice that analytics data for the past 4+ days is not visible in their dashboards. This is a display issue only — all data has been safely recorded and will be backfilled once the fix is deployed.