AI Security Digest
Aggregated ecosystem risk analysis
Vendor Watchlist
Tracking 0 critical integrations
Threat Stream Feed
Real-time security logs and system alerts
Amplitude - Snowflake Data Share export delivery issue
Sep 22, 11:49 PDT Investigating - Starting at 17:00 UTC, new data is not being delivered to Snowflake Data Share destinations. Existing shared data remains available, and data ingestion and analytics in Amplitude are not affected. No data loss is expected. Our team has identified an authentication issue on our side and is working on a fix. Delayed data will be delivered once resolved. No customer action is needed.We will share another update in 30 minutes.
Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe-7731" that masquerades as a security tool targeting developers integrating Twilio into their applications, while stealthily attempting to harvest sensitive data. The package, named "tw-pkgprobe-7731," was first uploaded to the npm registry in mid-August 2026 by an npm account named "twdepprobe7731."
Sumo Logic - Problem with Cloud SIEM Processing in North America 1 (US1)
Sep 22, 17:56 UTC Monitoring - We have implemented a fix for the issue affecting Cloud SIEM Processing. We are currently monitoring the results. Sep 22, 17:44 UTC Investigating - We are currently investigating reports of problems with Cloud SIEM Processing. Log security records may take longer than normal to become searchable after processing. Users may not receive data when running queries or viewing dashboards that depend on recently collected data and alerts may not dispatch. Users may al...
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) "at every step of the attack chain." The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the efforts of Health-ISAC, alongside Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, The Shadowserver
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling all available disk space was published on GitHub on September 19. The tool, called BigDiskBuster, has no patch, no CVE, and no Microsoft advisory. Its author, Abdelhamid Naceri, is a former Microsoft security researcher whose earlier Defender exploits were used in
Leaked GitHub App private keys let researchers impersonate 440 apps including CDC and BuildBuddy
A large-scale scan for leaked GitHub App private keys turned up some nice numbers, summarized below. Out of 5,000 leaked private keys tied to GitHub App environments, 474 were still valid at time of analysis. Those keys could impersonate 440 different GitHub Apps, some with high-level permissions (repo access, org-level admin, etc.). A subset reportedly could have allowed takeover of privat...
Akamai - Origin Server Connectivity Issues with Elevated Errors
Sep 22, 13:19 UTC Monitoring - We became aware of an issue with origin server connectivity that caused intermittent connectivity issues and elevated errors for some customers in affected regions. The issue was resolved at approximately 11:41 UTC on 22 September, 2026. The issue appears to have self-corrected; based on current observations, the service is resuming normal operations. We will continue to monitor to ensure the impact has been fully mitigated. We apologize for the impact and thank y...
Supabase - Supavisor connection disruptions in EU West 1 (Ireland)
Sep 22, 10:49 UTC Investigating - Some projects in the EU West 1 (Ireland) region may experience disruptions to Supavisor connections. Our team is aware of the issue and actively working on a resolution. We’ll share further updates as they become available.
Zoom - Service degradation affecting comment and attachment features in Zoom Canvas in US region.
Sep 22, 03:32 PDT Resolved - This incident has been resolved and the affected services have been restored. Sep 22, 03:19 PDT Monitoring - On 09/22/2026, Between 09:31 UTC to 09:55 UTC, Users may have experienced issues with comment and attachment features in Zoom Canvas.This incident has been resolved and the affected services have been restored.
New Relic - Test Incident - Public Status Page -ImpactIQ
Sep 22, 08:55 UTC Resolved - Test message -resolved Sep 22, 08:55 UTC Investigating - Test message - after fix
Supabase - Project creations are degraded in multiple regions
Sep 22, 08:33 UTC Monitoring - We have identified increased latency in Project creations in these regions from 0730 UTC to 0805 UTC:ap-northeast-1ap-northeast-2eu-central-1eu-central-2eu-north-1eu-west-1eu-west-3us-west-1 The latency has since recovered and our teams are monitoring for full recovery.Existing project availability has not been impacted.
Akamai - Increased latency during upstream provider maintenance in Singapore, Hong Kong, and Japan
Sep 22, 00:30 UTC Investigating - Scheduled upstream provider maintenance is currently taking place along network routes connecting Singapore, Hong Kong, and Japan from September 18, 2026 at 06:30 UTC through October 3, 2026 at 23:59 UTC. While core service remains operational, customers in the affected regions may notice increased latency during peak traffic hours. We are monitoring network performance until maintenance concludes.Customers and partners with a valid Control Center login can fin...
AWS - Service impact: Increased Error Rates
Between 3:49 PM and 5:06 PM PDT, we experienced increased error rates affecting new instance launches in the US-EAST-1 Region. During this time, customers may have experienced elevated error rates when attempting to launch new EC2 instances through RunInstances, CreateFleet, and related EC2 launch workflows. AWS services that launch EC2 instances on behalf of customers, including Amazon ECS, AWS Fargate, Amazon EMR, amongst others were also impacted during this period. We identified the root cau...
Zoom - Zoom Phone Maintenance - CA01-YVR1 Data Center: September 21, 2026
THIS IS A SCHEDULED EVENT Sep 21, 17:00 PDT - Sep 22, 21:30 PDT Sep 15, 12:28 PDT Scheduled - Zoom will perform service maintenance at our CA01-YVR1 Data Center starting at 5:00 PM Pacific on September 21, 2026. Zoom Phone users registered to the those sip zones will be automatically registered in the CA01-YYZ1sip zone sequentially. During the maintenance window, a brief disconnection may be experienced and notifications may be missed. If you get disconnected, the system will attempt to rec...
AWS - Service impact: Increased Error Rates
We can confirm increased error rates affecting new instance launches, including elevated API error rates for RunInstances, CreateFleet, and related EC2 launch workflows in the US-EAST-1 Region. Customers attempting to launch new EC2 instances may experience launch failures or elevated API response latency. Our engineers are actively engaged and working towards recovering the issue. We are seeing initial signs of recovery. Existing instances remain unaffected. We recommend retrying failed RunInst...
AWS - Service impact: Increased Error Rates
We are investigating increased API error rates in the US-EAST-1 Region.
Zoom - Service Degradation Affecting Apple Login for Zoom Sign-in.
Sep 21, 11:17 PDT Investigating - We are currently investigating a service degradation affecting a subset of users with Apple Login for Zoom Sign-in.Our team is actively working to identify the impact and root cause. We will provide an update as soon as more information becomes available.We appreciate your patience as we work to resolve this issue.
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a victim downloads and runs it, researchers at LastPass and Delphos Labs said on September 17. Microsoft's own hardware-compatibility program signs the driver, scored zero detections on VirusTotal when researchers
CircleCI - Delays starting Linux Machine jobs
Sep 21, 16:48 UTC Monitoring - Task wait times for Linux Machine are returning to normal. Sep 21, 16:22 UTC Investigating - Customers may experience delays in starting jobs on Linux Machine. We are investigating.
Zoom - Zoom Phone Maintenance - EU02 - AMS4 Data Center: September 21, 2026
THIS IS A SCHEDULED EVENT Sep 21, 09:00 PDT - Sep 23, 21:30 PDT Sep 10, 14:07 PDT Scheduled - Zoom will perform service maintenance at our EU02-AMS4 Data Center starting at 9:00 AM Pacific on September 21, 2026. Zoom Phone users registered to the those sip zones will be automatically registered in the EU02-FRA4 sip zone sequentially. During the maintenance window, a brief disconnection may be experienced and notifications may be missed. If you get disconnected, the system will attempt to re...
Netlify - Errors accessing Netlify-hosted sites
Sep 21, 15:52 UTC Monitoring - A fix has been implemented and we are monitoring the results. We will provide another update as we continue to monitor recovery. Sep 21, 15:45 UTC Identified - We have identified the issue and are working to restore normal service. We will provide another update as more information becomes available. Sep 21, 15:30 UTC Update - We are continuing to investigate this issue. Customers may also experience issues accessing the Netlify application and its features. ...
Zoom - Service Degradation Affecting Zoom Virtual Agent and Zoom Contact Center in US region
Sep 21, 08:45 PDT Identified - We have identified the service degradation where users may be experiencing issues with Zoom Virtual Agent Chat Agent 1.0 and Zoom Contact Center AI Expert Assistant 1.0. Our team is actively working on a resolution, and we will keep you informed with timely updates as progress is made. Thank you for your patience.
Asana - Partial outage in Automations
Sep 21, 14:59 UTC Identified - We've heard reports of rules and automations not running in the EU region. We've identified the source of the issue and fixed it for new automations triggers going forward. Our engineers are currently working on the backlog of automations that triggered and did not run during the incident.
Datadog - Delayed Monitors Notifications
Sep 21, 05:44 EDT Investigating - We are investigating delayed evaluations for metric, service check, composite, and SLO monitors in US1 which began at Sep 21, 2026, 9:18 AM UTC.
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. "ChainScript has appeared under multiple build names, including ComponentTask33, UpdateDigital, HostShared, and OrchidViolet66, while presenting itself as Spotify, Zoom Workplace, and Microsoft Teams software," Blackpoint Adversary Pursuit Group (APG)
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information technology (IT) services industry, once again highlighting how the adversary continues to target developers to breach target networks. Cybersecurity company SentinelOne, which disclosed details of the activity, said it involved the use of Apple
Zoom - Network Maintenance in SJC Datacenter: September 20, 2026
THIS IS A SCHEDULED EVENT Sep 20, 22:00 PDT - Sep 21, 02:00 PDT Aug 31, 00:56 PDT Scheduled - Zoom will perform service maintenance at SJC Datacenter. During the maintenance window, Users may experience an impact for a brief amount of time for services mentioned.
GitHub - Incident with Pull Requests
Sep 20, 22:32 UTC Update - A git fileserver issue caused a brief delay in creating some merge commits - we've isolated the underlying server and already observed recovery. Sep 20, 22:27 UTC Monitoring - The degradation affecting Pull Requests has been mitigated. We are monitoring to ensure stability. Sep 20, 22:13 UTC Investigating - We are investigating reports of degraded performance for Pull Requests
Zoom - Zoom Phone Update - Japan SIP Zones: September 20, 2026 (No Operational Impact)
THIS IS A SCHEDULED EVENT Sep 20, 08:00 - 10:00 PDT Sep 15, 15:49 PDT Scheduled - We will be providing an update to Zoom Phone - Japan SIP zones in Tokyo and Osaka. Please refer to https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0062333 for more details. This update includes credential rotation for Zoom Phone Corporate Directory.There is no operational impact. All services will be available during this scheduled update.
Optimizely - CMP: Data Not Loading in Plan, Resources, Library, and Other Modules (GCP Stack)
Sep 20, 11:51 UTC Monitoring - A fix has been implemented and we're now monitoring the results. Sep 20, 11:29 UTC Identified - The issue has been identified and a fix is being implemented Sep 20, 11:24 UTC Investigating - We are currently investigating an issue affecting the Optimizely Content Marketing Platform (CMP), where data is failing to load across multiple modules — including Plan, Resources, and Library — for a subset of customers on the GCP stack.Our Engineering team has been enga...
Datadog - Delayed events triggered by emails
Sep 20, 01:17 EDT Investigating - We are investigating increased latency processing Events coming from inbound emails. As a result of this issue, some users may see delays or gaps in the event stream or for event queries on dashboards and for events based workflows such as on-call notifications
Zoom - Zoom Phone Update: September 20, 2026 (No Operational Impact)
THIS IS A SCHEDULED EVENT Sep 19, 17:00 PDT - Sep 20, 02:00 PDT Sep 15, 15:55 PDT Scheduled - We will be providing an update to Zoom Phone. Please refer to https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0062333 for more details. This update includes credential rotation for Zoom Phone Corporate Directory.There is no operational impact. All services will be available during this scheduled update.
Supabase - Project Lifecycle Activity Degradation
Sep 19, 20:34 UTC Update - We are observing recovery in project lifecycle operations. Our team is investigating the root cause and actively working to prevent recurrence. Sep 19, 20:12 UTC Investigating - We are experiencing degradation of project lifecycle activities. We are investigating.
BragJack - $20K in bounty rewards from Anthropic, Perplexity, Google, Microsoft and Opera Using 1 Extension
Hi folks, my name is Gal Weizman, I do browser security research. Excited to finally share my recent work, where I managed to hack Chrome, Comet, Edge, Opera and Claude in Chrome using one single browser extension 2 CVEs & $20,000 in bounties 🙂 Hope you like it! submitted by /u/Content-Winter5328 [link] [comments]
Xero - Xero Scheduled Maintenance - Xero Reports and NZ GST return
THIS IS A SCHEDULED EVENT Sep 19, 16:00 - 17:30 UTC Sep 15, 21:15 UTC Scheduled - We're carrying out scheduled maintenance on Sunday 20 September 2026 from 4.00am to 5.30am NZST. Customers may not be able to access Xero Reports or related reporting fields, including NZ GST return.
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository. The chain began with a bug in the software that runs OpenAI's public help forum and moved through a weakness in OpenAI's own login system. This was security research,
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18. The French security company had kept his GitHub access open. CrowdSec says his laptop was compromised in May's supply chain attack on TanStack, in which malicious versions of TanStack's npm packages stole credentials from
CVE-2026-77179: Docker's hypervisor for Mac compromised (Docker Desktop, Docker Sandboxes)
submitted by /u/natcoba [link] [comments]
Zoom - Zoom Virtual Agent Update: September 19, 2026 (No Operational Impact)
THIS IS A SCHEDULED EVENT Sep 18, 17:00 PDT - Sep 19, 02:00 PDT Sep 15, 04:51 PDT Scheduled - We will be providing an update to Zoom Virtual Agent. Please refer to https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0067812 for more details. This update includes virtual agent performance testing and monitoring capabilities.There is no operational impact. All services will be available during this scheduled update.
Zoom - Zoom Contact Center Update: September 19, 2026 (No Operational Impact)
THIS IS A SCHEDULED EVENT Sep 18, 17:00 PDT - Sep 19, 02:00 PDT Sep 15, 04:43 PDT Scheduled - We will be providing an update to Zoom Contact Center. Please refer to https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0067626 for more details. This update includes the ability to access Zoom recordings directly from Epic patient records.There is no operational impact. All services will be available during this scheduled update.
Zoom - Service Degradation Affecting ZoomMate
Sep 18, 15:45 PDT Monitoring - The service degradation with ZoomMate has been successfully resolved. Our team will continue to monitor the situation closely and keep you informed of any further developments.
Xero - Xero Scheduled Maintenance - Invoicing, Statements and Quotes
THIS IS A SCHEDULED EVENT Sep 18, 22:00 - 23:30 UTC Sep 15, 21:11 UTC Scheduled - We're carrying out scheduled maintenance on Saturday 19 September 2026 from 10.00am to 11.30am NZST. During this window, the following features may be temporarily unavailable:- Sending email attachments from Invoicing- Sending email attachments from Statements- Sending email attachments from Quotes- PDF generation for Invoices, Statements, and QuotesWe appreciate your patience as we work to improve our platform.
Sumo Logic - Problem with Cloud SIEM APIs and Cloud SIEM UI in Europe 1 (EU), Canada (CA)
Sep 18, 21:59 UTC Monitoring - We have implemented a fix for the issue affecting Cloud SIEM APIs and Cloud SIEM UI. The Cloud SIEM User Interface may fail to load or show errors. This can impact viewing Insights, managing detection rules, or investigating related signals and records. We are currently monitoring the results. Sep 18, 21:57 UTC Identified - We have identified the source of the issue affecting Cloud SIEM APIs and Cloud SIEM UI. The Cloud SIEM User Interface may fail to load or s...
Vercel - Deployment stuck in initializing state
Sep 18, 21:36 UTC Investigating - We are currently investigating an issue causing an elevated rate of deployments getting stuck in an initializing state. We will provide additional updates as they become available.
Vercel - Elevated Errors Triggering Deployments
Sep 18, 20:56 UTC Update - We are continuing to investigate an issue causing elevated errors triggering deployments. We'll provide additional updates as they become available. Sep 18, 20:32 UTC Investigating - We are currently investigating an issue causing increased errors triggering deployments. We'll provide additional updates as they become available.
Squarespace - Acuity Scheduling Admin Mobile app crashing unexpectedly after iOS 27 update
Sep 18, 16:46 EDT Update - We currently recommend that users remain on iOS 26 and defer upgrading to iOS 27 until this issue is resolved. This precaution will ensure uninterrupted access to the Acuity Admin Mobile app. Android users remain unaffected. Sep 18, 16:35 EDT Investigating - Some users are experiencing issues with the Acuity Admin Mobile app crashing when attempting to launch the app after the latest iOS 27 update. We are currently investigating the issue.
Expensify - Loading issue on Expenses page
Sep 18, 18:33 UTC Monitoring - A fix has been implemented and we are monitoring the results. Sep 18, 18:15 UTC Identified - The issue has been identified and a fix is being implemented.
Rippling - Rippling app not loading for customers
Sep 18, 16:19 UTC Update - We are continuing to investigate this issue. Sep 18, 16:18 UTC Investigating - Rippling is loading intermittently/not at all for both employees and customers
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan. The attacks, per Zscaler ThreatLabz, involve the use of previously undocumented tools called RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH. The activity has been codenamed Operation
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0. "Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network,"
Vercel - Elevated Vercel KMS and Connect Errors
Sep 18, 12:00 UTC Resolved - Customers using Vercel KMS, Connect, Passport, or the Snowflake V0 Integration may have experienced elevated errors. We have resolved the incident and are continuing to monitor.
Are AIs Still Struggling with CAPTCHAs?
Anthropic’s recent security-incident document contains a bit about how CAPTCHAs are still frustrating Claude. In the transcript, the Claude model that is so powerful that Anthropic is gatekeeping access to it appeared to slam its virtual head against the wall solving a simple image identification test. In a test where the agent was asked to identify a shape that didn’t match the others displayed, ...
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin an agent installs for a malicious one, even when the agent locked that plugin to a specific reviewed version, security firm Air Security said on Thursday. The firm said Anthropic has patched the flaw in Claude Code 2.1.179 and OpenAI in Codex 0.146.0, that GitHub Copilot has no
Sentry - Delays in spans ingestion
Sep 18, 10:58 UTC Resolved - We have identified a networking issue with an upstream provider and are working on mitigations. Sep 18, 10:56 UTC Update - We have identified a networking issue with an upstream provider and are working on mitigations. Sep 18, 10:17 UTC Investigating - We are currently investigating an issue affecting spans ingestion in the EU region
Sentry - Delayed ingestion of errors in EU
Sep 18, 08:36 UTC Investigating - We are currently investigating an issue that causes new errors to be delayed in the EU region.
Zoom - Zoom Phone Maintenance - CA01-YYZ1 Data Center: September 17, 2026
THIS IS A SCHEDULED EVENT Sep 17, 17:00 PDT - Sep 18, 21:30 PDT Sep 15, 12:22 PDT Scheduled - Zoom will perform service maintenance at our CA01-YYZ1 Data Center starting at 5:00 PM Pacific on September 17, 2026. Zoom Phone users registered to the those sip zones will be automatically registered in the CA01-YVR1 sip zone sequentially. During the maintenance window, a brief disconnection may be experienced and notifications may be missed. If you get disconnected, the system will attempt to re...
Optimizely - Optimizely Identity is redirecting users to the wrong SSO login page.
Sep 17, 22:26 UTC Resolved - This incident has been resolved. Sep 17, 22:26 UTC Monitoring - A fix has been implemented, and we are monitoring the results. Sep 17, 22:24 UTC Identified - The issue has been identified, and a fix is being implemented. Sep 17, 22:23 UTC Investigating - We are currently investigating this issue.
GitHub - Elevated rate of errors for OpenAI models provided by Copilot
Sep 17, 20:59 UTC Investigating - We are investigating reports of degraded performance for Copilot AI Model Providers
Rippling - Rippling MCP is down
Sep 17, 20:47 UTC Resolved - This incident has been resolved. Sep 17, 20:27 UTC Monitoring - A fix has been implemented and we are monitoring the results. Sep 17, 20:20 UTC Identified - The issue has been identified and a fix is being implemented. Sep 17, 20:13 UTC Investigating - We are currently investigating this issue.
Amplitude - Realtime Data Pipeline Delay
Sep 17, 13:34 PDT Monitoring - Recovery is underway, and we are monitoring the system to confirm full recovery. There is no data loss, and no customer action is needed.We will provide the next update in 30 minutes. Sep 17, 13:05 PDT Update - We are continuing to investigate this issue. Sep 17, 13:05 PDT Investigating - Since 11:30 AM PST, Amplitude has been experiencing arealtime data pipeline delay. Some data may not yetappear in Amplitude in real time and may be delayed before it can best...
Plaid - Service Disruption Impacting Chime connections
Status: InvestigatingChime is currently experiencing downtime impacting all channels and data recipients. Transactions Data updates might be delayed. We will provide an update when Chime has resolved the issue.
Zoom - Zoom Support Maintenance - Search Function: September 17, 2026
Sep 17, 13:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 14, 12:13 PDT Scheduled - We will be performing maintenance on http://support.zoom.com/. Users may experience issues with the search function during the maintenance window.
Elastic Cloud - AutoOps node metrics temporarily unavailable in some regions
Sep 17, 15:50 UTC Investigating - We are investigating reports of missing node-level metrics (CPU, memory, disk, thread pools) for recent time ranges in a subset of AutoOps regions. This may appear as a "No data" message on the Nodes view. Cluster health, shard, and deployment data are unaffected, and no data loss has occurred. We will provide an update within the next 2 hours or earlier.
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere else on the host, Docker warns in a security announcement on September 15. The escape runs with the rights of the host account that runs the virtual machine. The flaw, CVE-2026-77179, is rated Critical, affects versions
Asana - Slow performance for a subset of Asana users
Sep 17, 14:36 UTC Investigating - We received an alert for unusual slow performance in several regions. We're investigating.
CVE-2026-90999: A fabricated Sentry bug report can make Seer's coding agent run attacker code
submitted by /u/Ok-Pepper-2354 [link] [comments]
Cloudflare - Increased HTTP Errors in GIG (Rio de Janeiro)
Sep 17, 14:00 UTCResolved - Cloudflare is aware that there was an increased level of HTTP errors in the GIG (Rio de Janeiro) datacenter, between 14:00 and 14:30 UTC. This has since recovered and normal operations have resumed.
Monday.com - Issues with automations and integrations
Sep 17, 10:39 UTC Resolved - The issue with our automations, workflows, and integrations has been successfully resolved. Please refresh your browser to resume regular service usage. Thank you for your patience Sep 17, 10:25 UTC Monitoring - A fix has been implemented and we are monitoring results to ensure full stability with Automations, Workflows, and Integrations. Sep 17, 10:07 UTC Investigating - We are currently investigating issues related to our automations, integrations, and workflo...
OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads
OpenAI on Wednesday disclosed six new instances of "unexpected or concerning model behavior" that took place over the past six months, while sharing a new framework for reporting, tracking, investigating, and disclosing model misalignment in a bid to improve transparency. "As AI systems grow more advanced and more widely deployed, we need to build a broader and better-informed consensus on the
Monday.com - Partial UI functionality degradation
Sep 17, 09:35 UTC Identified - The issue has been identified, and a fix is being implemented. Sep 17, 09:16 UTC Update - We are continuing to investigate this issue. Sep 17, 09:11 UTC Investigating - We're currently investigating an issue affecting some UI platform functionalities, including the Search functionality.
Cloudflare - DFW (Dallas) on 2026-09-17
Sep 17, 08:30 UTCScheduled - We will be performing scheduled maintenance in DFW (Dallas) datacenter on 2026-09-17 between 09:00 and 11:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network inter...
Vercel - Failures delivering Logs to Drains
Sep 17, 07:11 UTC Resolved - Between September 16, 2026 11:06 UTC and September 17, 2026 07:11 UTC, some customers experienced failed drain deliveries.An update caused larger payloads to exceed a 5 MB delivery-size limit at some Drain destinations. We have implemented a fix that splits larger payloads into smaller payloads before delivery. Affected Drains data could not be redelivered.
Cloudflare - PHX (Phoenix) on 2026-09-17
Sep 17, 06:30 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 17, 05:30 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 16, 07:31 UTCScheduled - We will be performing scheduled maintenance in PHX (Phoenix) datacenter on 2026-09-17 between 06:30 and 14:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the ...
Cloudflare - CLE (Cleveland) on 2026-09-17
Sep 17, 05:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 16, 08:32 UTCScheduled - We will be performing scheduled maintenance in CLE (Cleveland) datacenter on 2026-09-17 between 06:00 and 06:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting t...
Cloudflare - ARN (Stockholm) on 2026-09-17
Sep 17, 03:00 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 17, 02:50 UTCScheduled - We will be performing scheduled maintenance in ARN (Stockholm) datacenter on 2026-09-17 between 03:00 and 09:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location,...
Cloudflare - Replicate Pruna issue
Sep 17, 01:09 UTCIdentified - Some Pruna models may not be able to scale up and are therefore either experiencing long queue times or entirely unavailable. We are working with Pruna to resolve the issue.
Cloudflare - LIS (Lisbon) on 2026-09-17
Sep 17, 00:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 15, 07:50 UTCScheduled - We will be performing scheduled maintenance in LIS (Lisbon) datacenter on 2026-09-17 between 01:00 and 05:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this...
Cloudflare - OTP (Bucharest) on 2026-09-17
Sep 17, 00:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 15, 07:50 UTCScheduled - We will be performing scheduled maintenance in OTP (Bucharest) datacenter on 2026-09-17 between 01:00 and 05:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting t...
Zoom - Zoom Workforce Management Update: September 17, 2026 (No Operational Impact)
Sep 16, 17:00 PDT In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 15, 04:45 PDT Scheduled - We will be providing an update to Zoom Workforce Management. Please refer to https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0068337 for more details. This update includes an unassigned agents view in shifts and scheduling groups.There is no operational impact. All services will be available during this scheduled update.
Cloudflare - MAA (Chennai) on 2026-09-17
Sep 16, 23:51 UTCScheduled - We will be performing scheduled maintenance in MAA (Chennai) datacenter on 2026-09-17 between 00:00 and 02:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this traffic to fail over elsewhere during this maintenance window as network inte...
Cloudflare - LHR (London) on 2026-09-17
Sep 16, 23:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 15, 16:40 UTCScheduled - We will be performing scheduled maintenance in LHR (London) datacenter on 2026-09-17 between 00:00 and 08:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this...
Cloudflare - FCO (Rome) on 2026-09-17
Sep 16, 23:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 10, 13:10 UTCScheduled - We will be performing scheduled maintenance in FCO (Rome) datacenter on 2026-09-17 between 00:00 and 04:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expecting this t...
Sentry - EU: Span ingestion temporarily delayed and alerting offline for database maintenance
Sep 16, 21:15 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 14, 22:10 UTC Scheduled - We will be performing a database migration in the EU region that will pause span ingestion and disable span alerting for up to 2 hours. The Sentry UI and API should be available for the duration, but there will be a period of catch-up where ingestion will be behind and alerts will not fire (until ingestion has reached fresh data).
Cybersecurity statistics of the week (September 7th - September 13th)
Hi guys, I send out a weekly newsletter with the latest cybersecurity vendor reports and research, and thought you might find it useful, so sharing it here. All the reports and research below were published between September 7th - September 13th. You can get the below into your inbox every week if you want: https://www.cybersecstats.com/cybersecstatsnewsletter/ Identity Security Managing Agentic ...
Cloudflare - MAA (Chennai) on 2026-09-16
Sep 16, 19:00 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 15, 02:11 UTCScheduled - We will be performing scheduled maintenance in MAA (Chennai) datacenter between 2026-09-16 20:00 and 2026-09-17 00:00 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users in the affected region. For PNI / CNI customers connecting with us in this location, please make sure you are expec...
Segment - Actions S3 is currently experience formatting issues with the delivered events
Sep 16, 12:40 PDT Investigating - We are currently investigating an issue causing formatting anomalies with S3 action destinations. Our team is working on a mitigation.
Cloudflare - Increased HTTP 522 Errors in St. Louis
Sep 16, 18:35 UTCResolved - Customers may have observed elevated rates of HTTP 522 error responses from our St. Louis (STL) facility between approximately 16:35 and 16:55 UTC today, 2026-09-16.
Cloudflare - CGK (Jakarta) on 2026-09-16
Sep 16, 18:30 UTCIn Progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.Sep 16, 17:30 UTCScheduled - Maintenance will begin as scheduled in 60 minutes.Sep 16, 15:21 UTCScheduled - We will be performing scheduled maintenance in CGK (Jakarta) datacenter between 2026-09-16 18:30 and 2026-09-17 00:30 UTC. Traffic might be re-routed from this location, hence there is a possibility of a slight increase in latency during this maintenance window for end-users...
Our family business Gmail was hacked and sent fake DocuSign emails to ALL our contacts
Hi everyone. I’m hoping someone can help us understand what’s happening because we’re a small family-owned business without an IT department. It’s literally just us trying to figure this out. Yesterday, one of our business Gmail accounts sent a fake DocuSign email to a bunch of our contacts. We did not create or send it. Customers started calling and replying because they couldn’t open the documen...
Supabase - Query slowness for projects running Postgres version 14 in us-east-1 and ap-northeast-2
Sep 16, 17:53 UTC Identified - Projects running Postgres version 14 in us-east-1 and ap-northeast-2 may experience query slowness. We've identified the cause and are working on a fix.
HashiCorp - Degraded commit/content scans in HCP Vault Radar
Status: IdentifiedOur Engineering team has identified the cause and we are actively working on a fix. Once we have additional information, we will share another update.Affected components HCP Vault Radar (Degraded performance)
🐁 SpiceRAT infrastructure targets government and energy across Central Asia
Researchers tie SpiceRAT servers to energy and government targets across Central Asia, extending Bitdefender's SilkParasite report New research from Hunt.io on a SpiceRAT command and control cluster that connects to the SilkParasite infrastructure Bitdefender reported last month. The short version: three malware families that were treated as separate (SpiceRAT, NodeEdgeRAT, NomadRAT) share i...
If a critical API key leaks, how do you revoke it without taking down production?
Was looking into incident response plans for leaked credentials, and I’ve noticed a flaw in how most of us handle it. When an AWS or database key gets exposed, the normal thing is to revoke it immediately to stop an attacker. But if you do that without knowing all the services that rely on it, you could just trigger a self-inflicted outage. The main issue is tracing the affected area. If your secr...
BragJack - $20K in bounty rewards from Anthropic, Perplexity, Google, Microsoft and Opera
Hi folks, my name is Gal Weizman, I do browser security research. Excited to finally share my recent work, where I managed to hack Chrome, Comet, Edge, Opera and Claude in Chrome using one single browser extension 2 CVEs & $20,000 in bounties 🙂 Hope you like it! https://forever.security/blog/bragjack-attack-hijacks-every-browser-agent submitted by /u/Content-Winter5328 [link] [comments...
Cloudflare - Issues with 1.1.1.1 public resolver on .tn queries
Sep 16, 15:23 UTCIdentified - The issue has been identified and a fix is being implemented.Sep 16, 15:08 UTCInvestigating - Cloudflare is investigating an issue that potentially impacts users resolving queries for .tn TLD domains via the 1.1.1.1 public resolver. Further detail will be provided as more information becomes available.
CircleCI - Customers may experience delays in UI updates
Sep 16, 14:55 UTC Investigating - We are investigating a delay in pipeline data becoming available. Pipelines are still running, but data about them may be delayed in the UI or API.
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension. Once the extension was installed, it could access each product's built-in AI with a single click. On Comet, Edge,
Vercel - Missing Web Analytics and Speed Insights data
Sep 16, 14:00 UTC Resolved - Between 14:00 UTC and 15:40 UTC, Web Analytics and Speed Insights were degraded, resulting in some missing data in the dashboard during the affected time period.We identified the issue and landed a fix, and Web Analytics and Speed Insights have recovered. No additional actions are required.
Elastic Cloud - Elastic Support Portal unavailable
Sep 16, 13:17 UTC Investigating - We are currently aware that some customers may be unable to access the Elastic Support Portal at this time. We are working with our provider to investigate.If you need to contact support in the meantime, please contact support@elastic.co.