Every incident
The outages and security flaws this site explained, the newest first. Each one says what happened and what to do.
Still open 7
- PHP: lower-risk session upload progress flawMinorSecurity flawStarted Oct 23, 2026IdentifiedIdentified
- LiteLLM 1.107.0 shipped credential-stealing malwareCriticalPoisoned softwareStarted Oct 21, 2026MitigatedMitigatedExploited
- Node.js: four high severity flaws fixedMajorSecurity flawStarted Oct 21, 2026Fix availableFix available
- PHP2Shell: two critical flaws in PHPCriticalSecurity flawStarted Oct 20, 2026Fix availableFix availableExploited
- Capcom: 11.7 million CAPCOM ID accounts exposedMajorData breachStarted Oct 19, 2026MitigatedMitigated
- eMudhra: 8 certificate authority keys leakedMajorCertificatesStarted Oct 17, 2026MitigatedMitigated
- Plex2Shell: hackers hijack unpatched Plex serversMajorSecurity flawStarted Oct 16, 2026Fix availableFix availableExploited
Earlier 8
- Google Cloud London outage hits UK banksMajorOutageStarted Oct 20, 2026Resolved Oct 20, 2026ResolvedResolved
- Next.js: two critical remote code execution flawsCriticalSecurity flawStarted Oct 14, 2026Fix availableFix available
- Palo Alto firewalls: exploited flaw gives root accessMajorSecurity flawStarted Oct 14, 2026Fix availableFix availableExploited
- Ivanti Connect Secure VPN: zero-day under attackCriticalSecurity flawStarted Oct 13, 2026Fix availableFix availableExploited
- Windows: zero-day used to skip download warningsMajorSecurity flawStarted Oct 13, 2026Fix availableFix availableExploited
- Jira, Confluence and Bitbucket servers: exploited file flawMajorSecurity flawStarted Oct 5, 2026Fix availableFix availableExploited
- FortiMail mail servers: exploited flaw lets attackers inMajorSecurity flawStarted Oct 1, 2026Fix availableFix availableExploited
- PingCAP / TiDB Cloud: internal systems breachedMajorData breachStarted Sep 9, 2026MitigatedMitigated