AI Security Digest
Aggregated ecosystem risk analysis
Vendor Watchlist
Tracking 0 critical integrations
Threat Stream Feed
Real-time security logs and system alerts
DocuSign - Customers in AU may experience errors or delays when logging in, sending, or signing envelopes (Incident 5409)
Jul 23, 20:59 UTC Investigating - We are actively investigating this issue.
Datadog - Latency with Pages and Monitor state changes
Jul 23, 13:31 EDT Identified - The issue has been identified and a fix is being implemented. Jul 23, 13:08 EDT Investigating - We are investigating increased latency with Pages and Monitor state changes. As a result of this issue, some users may see delays.
HubSpot - Some HubSpot tools may be unavailable for some users
Jul 23, 12:42 EDT Investigating - We are investigating an issue impacting some HubSpot tools. We will provide an update when we have more information.
MongoDB Atlas - Cluster connectivity issues in Azure westus
Jul 23, 16:38 UTC Identified - Azure has confirmed that there are networking issues in the westus region. Please follow the official azure status post for more detailed updates https://azure.status.microsoft/en-us/status Jul 23, 16:21 UTC Investigating - We are currently investigating an issue with Azure clusters in westus region. Please refer to the azure status post here for more information https://azure.status.microsoft/en-us/status.
Monday.com - Investigating issues with our automations and workflows failing to send emails with attachments
Jul 23, 16:37 UTC Identified - Issues related to our automations and workflows failing/not working to send emails with attachments, which result in a receiving an error when triggering automations/workflows. Our team is working to resolve this as quickly as possible Jul 23, 16:01 UTC Investigating - We are currently experiencing issues related to our automations and workflows failing/not working to send emails with attachments, which result in a receiving an error when triggering automations/...
Azure - Issues connecting to resources in West US
Starting at 14:44 UTC on 23 July, 2026, we began investigating a networking issue affecting connectivity to Azure services in the West US region. Impacted customers may be experiencing intermittent connectivity failures, increased latency, or difficulty accessing Azure services. Customers with traffic traversing the West US region may also experience downstream impact.Our investigation is currently focused on network infrastructure within the affected region. We have implemented mitigation actio...
Zoom - Service Degradation Affecting Zoom Healthcare Integration services in US Region
Jul 23, 08:53 PDT Investigating - We have successfully identified the root cause affecting users' ability to sync new appointments with Zoom Healthcare Integration in US region.We are working with our vendor to resolve the issue. We will keep you informed with timely updates as progress is made.Thank you for your patience.
Dropbox - Dropbox is not working as expected for some users
Jul 23, 15:36 UTC Resolved - This incident has been resolved. Jul 23, 15:32 UTC Monitoring - A fix has been implemented and we are monitoring the results. Jul 23, 15:12 UTC Investigating - Dropbox is not working as expected for some users. We’re working to fix the problem as quickly as we can.
Amplitude - Delay in realtime data processing
Jul 23, 07:52 PDT Monitoring - A fix has been implemented and we are monitoring the results. Jul 23, 07:46 PDT Identified - The issue has been identified and a fix is being implemented. Jul 23, 07:35 PDT Investigating - We are actively investigating a delay in real time data processing. No data is lost.
Plaid - Payouts/Refunds API degraded
Status: ResolvedThis incident has been resolved.
Box - [Medium] Issues with Box Hubs
Jul 23, 07:30 PDT Resolved - After further monitoring, this incident is now considered resolved. Box services have been restored to full functionality. Please contact Box Support at https://support.box.com/ if you continue to experience any issues. Jul 23, 07:26 PDT Identified - Box continues remediation efforts to restore full functionality to Box Hubs. The underlying cause of the issue has been identified and efforts are underway to restore usability. Jul 23, 07:14 PDT Investigating - We ...
Zoom - Service Degradation Affected Zoom Blog Website
Jul 23, 07:03 PDT Monitoring - On 07/23/2026, Between 13:23 UTC to 13:25 UTC, the users may have experienced issue with Zoom Blog website.This incident has been resolved and the affected services have been restored.
Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic's Claude Cowork that makes it possible to break out of the confines of a Linux virtual machine (VM) within which the agent runs to read or write files anywhere on the Mac. Accomplish AI, which shared details of the vulnerability with The Hacker News ahead of publication, said about 500,000 macOS users running
MZ Automation libIEC61850
View CSAF Summary Successful exploitation of these vulnerabilities could allow an unauthenticated network-adjacent attacker to crash critical IEC 61850 services or execute arbitrary code, disrupting or compromising protection, visibility, and control functions. The following versions of MZ Automation libIEC61850 are affected: libIEC61850 >=v1.0.0|<=v1.6.1 CVSS Vendor Equipment Vulnerabiliti...
MZ Automation lib60870
View CSAF Summary Successful exploitation of this vulnerability could cause the parsing process to crash, which will cause a denial of service. The following versions of MZ Automation lib60870 are affected: lib60870 <=2.4.0 CVSS Vendor Equipment Vulnerabilities v3 8.2 MZ Automation MZ Automation lib60870 Out-of-bounds Read Background Critical Infrastructure Sectors: Chemical, Energy...
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite Executive summary A group of Russian state-supported cyber actors has been targeting and compromising various Western government and commercial organizations using the Zimbra Collaboration Suite (ZCS) software since at least July 2025. The Russian state-supported advanced persistent threat...
Cloudflare - Challenge data missing in Analytics
Jul 23, 11:44 UTC Identified - Cloudflare identified and is working on a resolution for Analytics data missing, specifically for Challenges. This issue started on 2026-07-22 15:10 UTC.We are working to mitigate this problem. More updates to follow shortly.
Supabase - Between 11:34 and 11:43 UTC, some tenants in the us-east-2 (Ohio) region experienced degraded connectivity during a connection pooler maintenance upgrade
Jul 23, 11:30 UTC Resolved - Between 11:34 and 11:43 UTC, some tenants in the us-east-2 (Ohio) region experienced degraded connectivity during a connection pooler maintenance upgrade. The affected cluster has since recovered, and connectivity is operating as expected.
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost Manager (WHM) instances. The activity involves malicious Packagist development versions spanning 10 packages associated with a legitimate PHP and DevOps developer, dinushchathurya, between July 12 and 13,
DigitalOcean - Llama-4-Maverick Model Availability
Jul 23, 11:16 UTC Investigating - Our Engineering team is currently investigating an issue where the llama-4-maverick model is unavailable. Users may experience HTTP 500 errors while using this model with Serverless Inference.We apologize for the inconvenience. Our Engineering team is working with high priority to resolve the issue. Thank you for your patience and understanding.
Cloudflare - Workers Analytics queries slowness
Jul 23, 10:53 UTC Resolved - This incident has been resolved. Jul 23, 10:30 UTC Monitoring - A fix has been implemented and we are monitoring the results. Jul 23, 10:23 UTC Investigating - Reporting and analytics for Cloudflare's Workers features is currently slow in returning results. These services are still fully operational, just analytics are delayed. We are working to mitigate this problem. More updates to follow shortly.
Box - [Medium] Issues with File Requests
Jul 23, 02:45 PDT Investigating - We are investigating an ongoing issue affecting metadata updates using File Request. We will provide more information as soon as it is available.Users of this service may face delays in metadata updates while attempting to upload files using File Request.
Cloudflare - PIT (Pittsburgh) on 2026-07-23
THIS IS A SCHEDULED EVENT Jul 23, 08:00 - 14:00 UTC Jul 22, 13:47 UTC Scheduled - We will be performing scheduled maintenance in PIT (Pittsburgh) datacenter on 2026-07-23 between 08:00 and 14:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over e...
Cloudflare - SEA (Seattle) on 2026-07-23
THIS IS A SCHEDULED EVENT Jul 23, 08:00 - 13:00 UTC Jul 21, 12:26 UTC Scheduled - We will be performing scheduled maintenance in SEA (Seattle) datacenter on 2026-07-23 between 08:00 and 13:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over else...
Vercel - Timeouts loading charts and observability data in Dashboard
Jul 23, 07:55 UTC Monitoring - The team identified the source of the issue and a fix has been implemented. We are starting to see recovery. Charts and observability data should be loading again for Firewall, Observability, Sandboxes, Speed Insights, Web Analytics, and Workflows. We continue to monitor. Jul 23, 07:33 UTC Investigating - We are currently investigating timeouts loading observability data for Firewall, Observability, Sandboxes, Speed Insights, Web Analytics, and Workflows. This i...
GitHub - Latency issues across a number of services
Jul 23, 07:53 UTC Investigating - We are investigating reports of degraded availability for Actions, Issues and Webhooks
Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft
Adobe patched CVE-2026-48294, a flaw in Adobe Acrobat Chrome extension that could let attackers steal WhatsApp Web chats by luring users to a webpage.   submitted by   /u/sunychoudhary [link]   [comments]
Vercel - Dashboard authentication errors
Jul 23, 06:47 UTC Investigating - We are investigating an issue causing the dashboard to be inaccessible for some users.
Xero - Global: Xero HQ - Some customers are experiencing errors or slowness when navigating XPM and Xero HQ
Jul 23, 05:10 UTC Update - Our team has resolved the issue impacting some partners when navigating XPM and Xero HQ. We apologise for any inconvenience this has caused. Jul 23, 04:49 UTC Update - We are continuing to investigate this issue. Jul 23, 04:46 UTC Investigating - We are aware of some customers experiencing slowness or receiving errors when navigating Xero HQ. Our team is investigating this with urgency.
Cloudflare - LHR (London) on 2026-07-23
Jul 23, 01:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jul 23, 00:05 UTC Scheduled - We will be performing scheduled maintenance in LHR (London) datacenter on 2026-07-23 between 01:00 and 08:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location...
Cloudflare - AMS (Amsterdam) on 2026-07-23
Jul 23, 00:30 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jul 14, 11:56 UTC Scheduled - We will be performing scheduled maintenance in AMS (Amsterdam) datacenter on 2026-07-23 between 00:30 and 06:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this locat...
Cloudflare - OSL (Oslo) on 2026-07-23
Jul 23, 00:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jul 22, 08:13 UTC Scheduled - We will be performing scheduled maintenance in OSL (Oslo) datacenter on 2026-07-23 between 00:00 and 04:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, ...
Plaid - Transaction Updates Delayed
Status: MonitoringThe underlying issue has been resolved, and recovery is progressing. Initial and historical transaction webhooks are now caught up, and new webhooks, including default webhooks, are being processed normally. We are continuing to work through the remaining backlog of older default webhook updates and are monitoring recovery closely.
Cloudflare - VIE (Vienna) on 2026-07-22
Jul 22, 23:45 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jul 22, 23:35 UTC Scheduled - We will be performing scheduled maintenance in VIE (Vienna) datacenter between 2026-07-22 23:45 and 2026-07-23 01:30 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this ...
GHSA-652q-gvq3-74qv: Snowflake Vulnerability
n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
DocuSign - Customers may be unable to complete purchases on ecom.docusign.com (Incident 5438)
Jul 22, 20:59 UTC Update - The issue has been identified and we continue our work to implement a fix. Jul 22, 20:10 UTC Identified - We have identified the issue and a fix is being implemented. Jul 22, 20:04 UTC Investigating - We are actively investigating this issue.
GitHub - Disruption with actions hosted runners
Jul 22, 20:47 UTC Update - Approximately 3% of GitHub Actions runs on GitHub-hosted runners are experiencing run start delays exceeding 5 minutes. A small portion of these runs may fail after extended delays. We have identified the cause and are working on a mitigation. Jul 22, 20:43 UTC Investigating - We are investigating reports of degraded performance for Actions
Amplitude - Some users may have experienced errors when accessing Amplitude.
Jul 22, 13:20 PDT Resolved - We identified the source of the issue and rolled back the responsible change at 12:06 PM PT (19:06 UTC). Error rates have returned to normal, and we are actively monitoring to confirm full stability.There is no data loss. No customer action is needed at this time.
GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier
Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings will drop from $20,000-$30,000+ to a fixed $10,000, while its permanent invite-only VIP tier will pay $30,000 or more. Reports filed before that date, including those already in GitHub's growing triage queue, will retain the previous payout terms. GitHub said the
Cloudflare - Customers unable to create Access and Device Enrollment policies via the Dashboard and API
Jul 22, 18:35 UTC Identified - Cloudflare engineering is investigating an issue preventing customers from creating new Access and Device Enrollment policies in the Zero Trust Dashboard and via API. This is not impacting any authentication or policy enforcement services.
1Password - Account governance functions are unavailable in SaaS Manager
Jul 22, 13:55 EDT Investigating - SaaS Manager is currently unable to communicate with Managed Credentials. As a result, customers using Better Together features may be unable to make changes to credential ownership. We are actively investigating the issue and will provide updates as more information becomes available.
Cloudflare - NRT (Tokyo) on 2026-07-22
Jul 22, 17:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jul 22, 16:25 UTC Scheduled - We will be performing scheduled maintenance in NRT (Tokyo) datacenter on 2026-07-22 between 17:00 and 21:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location,...
Supabase - Log Ingestion Problems
Jul 22, 16:56 UTC Identified - We have identified the issue and are working to re-enable the ingestion of logs. Jul 22, 16:29 UTC Investigating - We are experiencing a problem with log ingestion. Customers may experience a lack of new logs being visible from their projects. We are investigating.
DigitalOcean - Gradient AI Serverless Inference Requests Timing Out for qwen3.5-397b-a17b
Jul 22, 16:50 UTC Investigating - We are currently investigating this issue.
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user's WhatsApp data. The shortcoming has been codenamed HermeticReader by Guardio Labs. It's officially tracked as CVE-2026-48294 (CVSS score: 7.4), with the vulnerability
Securing Claude: How AppOmni brings enterprise-grade governance to Anthropic’s AI platform
Claude stores enterprise content, runs agents, and exposes data via APIs. AppOmni brings continuous posture management, identity governance, and threat detection to Claude Enterprise. The post Securing Claude: How AppOmni brings enterprise-grade governance to Anthropic’s AI platform appeared first on AppOmni.
I was reporter #11 for a WPForms PayPal webhook vulnerability (CVE-2026-4986)
I found and reported an authentication failure in the WPForms PayPal Commerce webhook, the webhook route being public was not the vulnerability as webhooks have to be publicly reachable so that PayPal can deliver events. The problem was what happened after the request arrived. In affected versions, the handler could process a supported event before establishing that PayPal was actually the sender....
Cloudflare - RDU (Durham) on 2026-07-22
THIS IS A SCHEDULED EVENT Jul 22, 14:00 - 22:00 UTC Jul 22, 03:54 UTC Scheduled - We will be performing scheduled maintenance in RDU (Durham) datacenter on 2026-07-22 between 14:00 and 22:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsew...
Netlify - Errors Uploading Attachments to Agent Runners
Jul 22, 13:56 UTC Resolved - This incident has been resolved. Jul 22, 13:29 UTC Monitoring - We are currently investigating an issue where some users are encountering errors when uploading attachments to Agent Runners. We have implemented a fix and are monitoring the results.
Zoom - Service Degradation Affecting Multiple Services in US and Europe
Jul 22, 06:23 PDT Resolved - This incident has been resolved and the affected services have been restored. Jul 22, 06:12 PDT Monitoring - Between 12:02 PM UTC to 12:40 PM UTC users might have experienced a service degradation affecting multiple services in US and Europe which has been successfully resolved.Our team will continue to monitor the situation closely and keep you informed of any further developments.
Sumo Logic - Problem with CSE Processing Pipeline in North America 1 (US1)
Jul 22, 11:42 UTC Resolved - We are no longer seeing issues with CSE Processing Pipeline and normal operation has been restored at this time. Jul 22, 10:05 UTC Monitoring - We have implemented a fix for the issue affecting CSE Processing Pipeline, which are resulting in latency, slowness, or delay in displaying data. We are currently monitoring the results. Jul 22, 09:21 UTC Investigating - We are currently investigating reports of problems with CSE Processing Pipeline. The symptoms are: l...
Why Modern SOCs Need Multi-Layered Detections
The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-forth continued. Today, AI-equipped attackers are simply outpacing defenses. Most intrusions now bypass endpoint and malware-based detection entirely. The CrowdStrike Global Threat Report estimates around 79% of attacks are malware-free, as threat actors rely on
Cloudflare - MCI (Kansas City) on 2026-07-22
THIS IS A SCHEDULED EVENT Jul 22, 09:00 - 12:00 UTC Jul 20, 08:48 UTC Scheduled - We will be performing scheduled maintenance in MCI (Kansas City) datacenter on 2026-07-22 between 09:00 and 12:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over ...
Cloudflare - AMM (Amman) on 2026-07-22
THIS IS A SCHEDULED EVENT Jul 22, 09:00 - 16:00 UTC Jul 21, 16:14 UTC Scheduled - We will be performing scheduled maintenance in AMM (Amman) datacenter on 2026-07-22 between 09:00 and 16:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewh...
Wix - Issues Affecting Multiple Wix Services
Jul 22, 08:48 UTC Resolved - This incident has been resolved. Jul 22, 08:41 UTC Monitoring - A fix has been implemented and we are monitoring the results. Jul 22, 08:38 UTC Identified - The issue has been identified and a fix is being implemented. Jul 22, 08:36 UTC Update - We are continuing to investigate this issue. Jul 22, 08:36 UTC Investigating - We are currently investigating this issue.
Cloudflare - Increase in errors from R2 in ENAM
Jul 22, 08:22 UTC Investigating - Cloudflare is aware of, and investigating an issue with an increased number of errors from R2 in Eastern North America. Further detail will be provided as more information becomes available.
HubSpot - HubSpot is experiencing issues
Jul 22, 03:47 EDT Investigating - Object Index views across the CRM are partially unavailable in portals in the EU1 hublet since 03:21 PM GMT+8 (UTC +08:00). We are investigating the cause and will update this page when we have more information. We will be back with an update within 45 minutes.The information on this page reflects our understanding of the incident and impact at the time of the update.
Cloudflare - Network Performance Issues in Istanbul
Jul 22, 07:44 UTC Resolved - Cloudflare is aware of Network Performance issues in Istanbul, Türkiye, between 08:44 and 08:50 UTC.Service has recovered, and operations are back to normal.
Cloudflare - IAD (Ashburn) on 2026-07-22
THIS IS A SCHEDULED EVENT Jul 22, 07:00 UTC - Jul 23, 11:00 UTC Jul 21, 05:48 UTC Scheduled - We will be performing scheduled maintenance in IAD (Ashburn) datacenter between 2026-07-22 07:00 and 2026-07-23 11:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this tra...
Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA
German and US law enforcement have taken down the core infrastructure of Kratos, described by German investigators as one of the world's most widely used criminal phishing kits, and Indonesian authorities arrested the man they say developed and ran it. In a joint announcement on Monday, the Frankfurt public prosecutor's cybercrime unit (ZIT) and Germany's Federal Criminal Police Office (BKA)
Cloudflare - Cloudflare Malicious Upload Detection Issues
Jul 22, 06:37 UTC Identified - The issue has been identified and a fix is being implemented. Jul 22, 06:27 UTC Investigating - Cloudflare Malicious Upload Detection IssuesCloudflare is investigating issues with elevated errors in Malicious Upload Detection service.We are working to understand the full impact and mitigate this problem. More updates to follow shortly.
Cloudflare - EWR (Newark) on 2026-07-22
THIS IS A SCHEDULED EVENT Jul 22, 06:00 - 10:00 UTC Jul 15, 13:56 UTC Scheduled - We will be performing scheduled maintenance in EWR (Newark) datacenter on 2026-07-22 between 06:00 and 10:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsew...
Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agent against them, driving it into projects the attacker has no rights to reach and quietly leaking what it finds. The flaw is in Microsoft's official Azure DevOps MCP server, and it works because one of its tools returns pull request descriptions without a prompt-injection guardrail the company had
OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark
OpenAI on Tuesday said a combination of its artificial intelligence (AI) models, including GPT-5.6 Sol and an "even more capable pre-release model," was behind the security incident that targeted Hugging Face's production infrastructure last week. The AI company said the models were operating with "reduced cyber refusals for evaluation purposes" that might otherwise limit their ability to
Xero - Global: Xero HQ - Some customers are experiencing errors or slowness when navigating Xero HQ
Jul 22, 03:28 UTC Resolved - Our team has resolved the issue impacting some partners when navigating Xero HQ. We apologise for any inconvenience this has caused. Jul 22, 03:14 UTC Monitoring - Our team has implemented a fix and we are currently monitoring the results. Jul 22, 03:02 UTC Investigating - We are aware of some customers experiencing slowness or receiving errors when navigating Xero HQ. Our team is investigating this with urgency.
Xero - Global: Expenses - Some customers are experiencing errors when accessing Expense in Xero
Jul 22, 01:36 UTC Resolved - We were aware of some customers receiving errors when accessing Expenses in Xero. A product release caused this feature to become temporarily unavailable. Our team has resolved the issue. We apologise for any inconvenience this has caused.
Cloudflare - LHR (London) on 2026-07-22
THIS IS A SCHEDULED EVENT Jul 22, 00:00 - 09:00 UTC Jul 19, 23:38 UTC Scheduled - We will be performing scheduled maintenance in LHR (London) datacenter on 2026-07-22 between 00:00 and 09:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsew...
Cloudflare - OSL (Oslo) on 2026-07-22
THIS IS A SCHEDULED EVENT Jul 22, 00:00 - 04:00 UTC Jul 20, 08:16 UTC Scheduled - We will be performing scheduled maintenance in OSL (Oslo) datacenter on 2026-07-22 between 00:00 and 04:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhe...
Cloudflare - HAM (Hamburg) on 2026-07-21
Jul 21, 23:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jul 20, 17:04 UTC Scheduled - We will be performing scheduled maintenance in HAM (Hamburg) datacenter between 2026-07-21 23:00 and 2026-07-22 08:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this...
Cloudflare - CDG (Paris) on 2026-07-21
THIS IS A SCHEDULED EVENT Jul 21, 23:00 UTC - Jul 22, 07:00 UTC Jul 21, 15:00 UTC Scheduled - We will be performing scheduled maintenance in CDG (Paris) datacenter between 2026-07-21 23:00 and 2026-07-22 07:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traff...
GHSA-f75j-4cw6-rmx4: Docker Vulnerability
Gitea Docker image: `REVERSE_PROXY_TRUSTED_PROXIES = *` default lets any source IP impersonate any user via `X-WEBAUTH-USER`
Zoom - Service Degradation Affecting functionality in Zoom Canvas, Clips, Slides, Sheets, Paper, and Hub.
Jul 21, 11:56 PDT Monitoring - The service degradation affecting functionality in Zoom Canvas, Clips, Slides, Sheets, Paper, and Hub. has been successfully resolved. Our team will continue to monitor the situation closely and keep you informed of any further developments. Jul 21, 11:47 PDT Update - We are continuing to work on a fix for this issue. Jul 21, 11:43 PDT Identified - We have successfully identified the root cause affecting functionality in Zoom Canvas, Clips, Slides, Sheets, Pap...
Cloudflare - Newly entitled R2 accounts are seeing delays when trying to access the S3-compatible API
Jul 21, 17:31 UTC Identified - We have identified an issue with issuance of advanced certificates for new R2 users, customers may see a delay while we process a backlog.
Cloudflare - NRT (Tokyo) on 2026-07-21
THIS IS A SCHEDULED EVENT Jul 21, 17:00 - 21:00 UTC Jul 20, 02:30 UTC Scheduled - We will be performing scheduled maintenance in NRT (Tokyo) datacenter on 2026-07-21 between 17:00 and 21:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewh...
Cloudflare - Durable Object startup errors in Eastern Europe
Jul 21, 16:57 UTC Resolved - This incident has been resolved. Jul 21, 16:29 UTC Monitoring - A fix has been implemented and we are monitoring the results. Jul 21, 16:21 UTC Investigating - Cloudflare has identified an issue causing an increase of errors for Durable Objects and downstream services in Eastern Europe. We are working to analyze and mitigate this problem. More updates to follow shortly.
AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
Hidden text on a web page was enough to make Kiro, AWS's agentic coding IDE, rewrite its own configuration file and run an attacker's code on a developer's machine, with no approval step able to stop it. Intezer, in research with Kodem Security, found that a request as ordinary as asking Kiro to summarize a page could end in remote code execution. AWS has patched the issue, and no CVE has been
Elastic Cloud - Metering issue with Elastic Cloud Hosted Deployments
Jul 21, 14:24 UTC Investigating - We have identified an issue with our metering of Instance Capacity for Hosted Deployments that affects a subset of customers. We currently believe the impact to be limited to a small number of customers but are still working to identify and correct all occurrences of this issue. We will proactively issue billing corrections where necessary.
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments. Arctic Wolf Labs said it investigated multiple intrusions in June 2026 that began with the exploitation of CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw affecting the portal and gateway
Elastic Cloud - AutoOps monitoring data not ingested for subset of deployments
Jul 21, 13:45 UTC Identified - RESOLVED - Between Jul 18 02:40 UTC and Jul 20 14:00 UTC, a subset of Elastic Agents were unable to report metrics to AutoOps across all regions. The underlying issue has been corrected and data is flowing normally. Impacted deployments may notice some gaps in their AutoOps monitoring data during this timeframe.Note this incident has already been resolved, and is being posted retroactively.
Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW
View CSAF Summary Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/ The following versions of Siemens RUG...
Rockwell Automation FactoryTalk Services Platform
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to impersonate an authorized user on the FTSP server, resulting in unauthorized access to system configurations. The following versions of Rockwell Automation FactoryTalk Services Platform are affected: FactoryTalk Directory (FTSP) 6.60 CVSS Vendor Equipment Vulnerabilities v3 7.8 Rockwell Automation...
Cloudflare - Audit Logs delayed
Jul 21, 10:40 UTC Resolved - This incident has been resolved. Jul 21, 10:35 UTC Monitoring - A fix has been implemented and we are monitoring the results. Jul 21, 10:35 UTC Identified - The issue has been identified and a fix is being implemented. Jul 21, 10:06 UTC Investigating - We are currently seeing a delay in making new audit logs available for retrieval. This is restricted to the new audit logs v2 system, v1 audit logs are unaffected. No logs are being lost.
GitHub - Some SSH connections using deploy keys are failing
Jul 21, 10:31 UTC Investigating - We are investigating reports of impacted performance for some GitHub services.
Sentry - Delayed ingestion on us region
Jul 21, 10:30 UTC Investigating - We are actively investigating this issue
Elastic Cloud - Elastic Cloud - Email MFA Delivery Delays (Gmail)
Jul 21, 09:36 UTC Investigating - We are currently investigating an issue affecting multi-factor authentication (MFA) via email for Elastic Cloud users with Gmail accounts. Affected users may experience long delays or failures when receiving their email MFA code.Available Workarounds:- Use an alternative MFA factor if registered (Authenticator App / TOTP or WebAuthn).- Authenticate using the "Log in with Google" social login button.Note: API Key access to your projects and deployments remains f...
Heap - Some US Connect customers may be impacted by delays in data lake ingestion
Jul 21, 02:06 PDT Resolved - This incident has been resolved. Jul 20, 23:36 PDT Identified - The issue has been identified and a fix is being implemented. Jul 20, 23:34 PDT Investigating - We are currently investigating this issue.
Cloudflare - BGW (Baghdad) on 2026-07-21
THIS IS A SCHEDULED EVENT Jul 21, 07:00 UTC - Jul 23, 16:00 UTC Jul 16, 13:23 UTC Update - We will be performing scheduled maintenance in BGW (Baghdad) datacenter between 2026-07-21 07:00 and 2026-07-23 16:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffi...
Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution
Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber. In a post shared on X, the threat intelligence firm said it's observing in-the-wild exploitation of CVE-2026-6875 (CVSS score: 9.5), a sandbox escape vulnerability that could allow an unauthenticated user to run arbitrary code. Patches for the flaw were
Zoom - Network Maintenance in Vancouver Datacenter: July 20, 2026
Jul 20, 23:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jul 12, 02:56 PDT Scheduled - Zoom will perform service maintenance at Vancouver (YVR) Datacenter. During the maintenance window, Users may experience an impact for a brief amount of time for services mentioned.
Heap - Some US customers may experience PA query failures in the app.
Jul 20, 22:56 PDT Resolved - This incident has been resolved. Jul 20, 11:05 PDT Monitoring - A fix has been implemented and we are monitoring the results. Jul 20, 10:44 PDT Investigating - We are currently investigating this issue.
Cloudflare - AUS (Austin) on 2026-07-21
THIS IS A SCHEDULED EVENT Jul 21, 00:00 - 04:00 UTC Jul 16, 11:33 UTC Scheduled - We will be performing scheduled maintenance in AUS (Austin) datacenter on 2026-07-21 between 00:00 and 04:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsew...
Cloudflare - MUC (Munich) on 2026-07-21
THIS IS A SCHEDULED EVENT Jul 21, 00:00 - 04:00 UTC Jul 16, 11:33 UTC Scheduled - We will be performing scheduled maintenance in MUC (Munich) datacenter on 2026-07-21 between 00:00 and 04:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsew...
Cloudflare - LHR (London) on 2026-07-20
Jul 20, 23:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jul 19, 23:38 UTC Scheduled - We will be performing scheduled maintenance in LHR (London) datacenter between 2026-07-20 23:00 and 2026-07-21 09:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this ...
Cloudflare - CDG (Paris) on 2026-07-20
THIS IS A SCHEDULED EVENT Jul 20, 23:00 UTC - Jul 21, 07:00 UTC Jul 20, 13:16 UTC Scheduled - We will be performing scheduled maintenance in CDG (Paris) datacenter between 2026-07-20 23:00 and 2026-07-21 07:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traff...
Cloudflare - Increase in R2 500 errors in ENAM
Jul 20, 21:30 UTC Resolved - Cloudflare has identified and resolved an issue impacting some customers where R2 requests would return 500 errors in ENAM between 20th July 2026 21:24 UTC to 21st July 2026 14:39 UTC.
Cloudflare - Datachannel Unavailable
Jul 20, 19:13 UTC Resolved - This incident is now resolved. Jul 20, 19:07 UTC Monitoring - We have identified an issue with Realtime datachannel creation failure and have applied a fix. We are currently monitoring the results.
GCP - RESOLVED: Google Cloud VMware Engine (GCVE) Stretched Cluster customers are experiencing zonal outages impacting network connectivity across multiple regions.
Incident began at 2026-07-14 10:00 and ended at 2026-07-14 20:40 (all times are US/Pacific).Preliminary Incident Report We sincerely apologize for the disruption this incident caused to your business. We know how much you rely on Google Cloud, and we regret the impact on your productivity. We are working to address the root cause and prevent this from occurring in the future. Please note, this information is based on our best knowledge at the time of posting and is subject to change as our inve...
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign codenamed FakeGit. "FakeGit uses copied projects, lookalike developer profiles, convincing READMEs, and malicious ZIP
Zoom - Service Degradation Affecting Zoom AI Expert Assist in US Region.
Jul 20, 09:55 PDT Resolved - This incident has been resolved and the affected services have been restored. Jul 20, 09:35 PDT Monitoring - Between 07/20/2026 14:38 UTC and 16:01 UTC, a subset of users may have experienced issues affecting Zoom AI Expert Assist in US Region.We have mitigated the issue and our team will continue to monitor the situation closely and keep you informed of any further developments.
Cloudflare - COK (Kochi) on 2026-07-20
Jul 20, 16:45 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jul 20, 16:30 UTC Scheduled - We will be performing scheduled maintenance in COK (Kochi) datacenter on 2026-07-20 between 16:45 and 18:00 UTC.Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location,...