DPG-cyber

The issue has been identified and a fix is being implemented.

We're aware of recently announced PHP vulnerabilities. We have mitigations in place, and have patched our managed services, including Web Hosting and Managed Hosting for WordPress. If you manage your own server or VPS, you'll need to apply the PHP update yourself. Latest updates and steps can be found at https://www.godaddy.com/resources/news/important-php-security-update-what-website-owners-need-to-do

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Scheduled maintenance is currently in progress. We will provide updates as necessary.

We're aware of recently announced PHP vulnerabilities. We have mitigations in place, and have patched our managed services, including Web Hosting and Managed Hosting for WordPress. If you manage your own server or VPS, you'll need to apply the PHP update yourself. Latest updates and steps can be found at https://www.godaddy.com/resources/news/important-php-security-update-what-website-owners-need-to-do

The root cause has been identified as undersea cable issues affecting Azure infrastructure. The impact is highest for South Africa, which has the longest network path to Australia. Requests from South Africa to Azure DevOps organizations hosted in Australia are seeing an availability impact of around 6%. We expect improvement by October 26 and further recovery by November 4, though both dates are tentative due to technical complexity of the issue itself.

Cloudflare has identified a third-party issue affecting customers whose traffic passes through external vendor firewalls after recent firmware upgrades. Customers may observe: ERR_TIMED_OUT on standard HTTPS websites ERR_EMPTY_RESPONSE on non-standard HTTPS ports (e.g., 8443) Cloudflare's network and edge are functioning normally — these failures occur at the firewall inspection layer and can only be resolved with actions on the 3rd party software configuration.

Kaseya is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. CVE-2026-109618 involves a remote code execution vulnerability where handling out-of-memory errors via longjmp() leaves request memory uninitialized due to improper control flow management, potentially allowing attackers to achieve remote code execution using out-of-memory (OOM) triggers. CVE-2026-109619 describes a remote code execution vulnerability where longjmp() fatal error handling leaves global memory pointing to freed memory regions. These regions can later be accessed during subsequent requests, potentially enabling arbitrary code execution. Kaseya has completed an evaluation of its product portfolio regarding these vulnerabilities. A summary of the current status across impacted products and services is provided in the table below. As our investigation and remediation efforts continue, we will keep the following list updated with the latest information. Here is what each status means: Fully Patched: The fix has been applied. Compensating Controls: The product is impacted, protective controls are in place, and we are working to remediate. Unaffected: The product is not affected by these vulnerabilities. Product Status: AudIT - Unaffected Autotask PSA - Fully Patched Datto Backup for Azure Files + Blob Storage - Unaffected BMS - Fully patched Connect Booster - Unaffected Datto Backup For Azure - Unaffected Datto BCDR - Compensating Controls Datto Direct to Cloud Products - Compensating Controls Datto EDR - Unaffected Datto Networking - Compensating Controls Datto Partner Portal - Compensating Controls Datto RMM - Fully Patched Datto SaaS Defense - Unaffected Datto SaaS Protection + Backupify - Compensating Controls Datto Workplace + File Protect - Compensating Controls Endpoint Backup V2 - Fully Patched Graphus - Unaffected ID Agent - Compensating Controls Inky - Unaffected IT Glue - Unaffected Kaseya One - Unaffected Kaseya Quote Manager - Compensating Controls Kaseya MDM - Unaffected Microsoft Entra Backup - Unaffected MyITProcess - Unaffected Passly - Unaffected RapidFire Tools - Compensating Controls RocketCyber - Compensating Controls SaaS Alerts -Unaffected Secure Payments - Compensating Controls Spanning - Compensating Controls Unitrends - Compensating Controls UniView - Unaffected vPenTest - Fully Patched VSA 10 - Fully Patched VSA 9 - Compensating Controls We will continue to provide updates as additional information becomes available. For additional questions, please create a ticket with our Support team here: https://helpdesk.kaseya.com/hc/en-gb#/contact

The issue has been identified and a fix is being implemented.

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Cloudflare has identified a third-party issue affecting customers whose traffic passes through external vendor firewalls after recent firmware upgrades. Customers may observe: ERR_TIMED_OUT on standard HTTPS websites ERR_EMPTY_RESPONSE on non-standard HTTPS ports (e.g., 8443) Cloudflare's network and edge are functioning normally — these failures occur at the firewall inspection layer and can only be resolved with actions on the 3rd party software configuration.

We are providing an update on the disruption affecting the Middle East (UAE) (me-central-1) Region. After a thorough assessment, we have determined that we are unable to restore access to the resources and data hosted exclusively in the mec1-az2 Availability Zone. We continue to work on recovering regional resources, as well as zonal resources hosted in the other affected Availability Zones (mec1-az1 and mec1-az3). Since the disruption began in March, most customers have been able to re-establish their operations in other Regions by restoring backups or copying data that remained accessible. AWS Support remains available to help customers who need assistance moving their applications to alternate Regions. We remain committed to supporting our customers in the UAE. We are working on replacing the affected infrastructure and will provide an update on the restoration of our services in the coming months. We have notified the relevant authorities and continue to work with them toward that goal.