Monitoring - Most systems have been patched overnight and there is minimal impact to services ongoing. We are continuing to identify andnnotify clients running systems we consider may be impacted.
Oct 22, 2026 - 08:27 AEDT
Oct 22, 2026 - 08:27 AEDT
Investigating - We are aware of the widely reported PHP security vulnerability (CVE-2026-109618 / CVE-2026-109619).
Where we are aware of systems that are running potential impacted versions of PHP:
- we are applying vendor/WAF rule mitigations for current known exploits
- we are restricting IP access where this is not possible to prevent exploit
- we have confirmed that web hosting services are receiving protection through our partnership with CloudLinux and the Immunify360 services we run.
In some cases, we have also taken the proactive step to temporarily disable web services on systems in line with the current practice by several organisations. This is typically on systems where the current version of PHP is not supported, and is not likely to receive patch updates and will require further action to resolve.
Customers hosting virtual infrastructure should urgently consider the advice from the ASD at (https://www.cyber.gov.au/alert/critical-vulnerabilities-in-php, though at the time of release this site was offline).
We anticipate most services will be restored early morning Sydney time (it will take some time for the updates to be released, applied and tested, and systems to be cleared).
Oct 21, 2026 - 23:46 AEDT
Where we are aware of systems that are running potential impacted versions of PHP:
- we are applying vendor/WAF rule mitigations for current known exploits
- we are restricting IP access where this is not possible to prevent exploit
- we have confirmed that web hosting services are receiving protection through our partnership with CloudLinux and the Immunify360 services we run.
In some cases, we have also taken the proactive step to temporarily disable web services on systems in line with the current practice by several organisations. This is typically on systems where the current version of PHP is not supported, and is not likely to receive patch updates and will require further action to resolve.
Customers hosting virtual infrastructure should urgently consider the advice from the ASD at (https://www.cyber.gov.au/alert/critical-vulnerabilities-in-php, though at the time of release this site was offline).
We anticipate most services will be restored early morning Sydney time (it will take some time for the updates to be released, applied and tested, and systems to be cleared).
Oct 21, 2026 - 23:46 AEDT
Network Services
Operational
IP Transit
Operational
Ethernet services
Operational
NBN
Operational
ADSL Services
Operational
Fixed Wireless Ethernet
Operational
Intercapital Capacity
Operational
International Capacity
Operational
3G/4G Data Services
Operational
Private WAN (MPLS VPN)
Operational
Managed VPN
Operational
Voice Services
Operational
Voice trunking
Operational
CloudPBX
Operational
ISDN Services
Operational
Telstra Rebill
Operational
CloudPBX Mobile
Operational
Email Services
Operational
SpamCloud
Operational
Hosted Exchange
Operational
POP/IMAP Legacy Email
Operational
Hosting and Data Centre
Operational
Virtual Machine Hosting
Operational
Co-location
Operational
Web Hosting
Operational
Managed Backup (Dell Rapid Recovery)
Operational
Managed Backup (Veeam)
Operational
Billing Systems
Operational
Helpdesk Services
Operational
Xero Ltd - API Accounting API
Operational
Xero Ltd - API Files API
Operational
Xero Ltd - API Payroll API
Operational
Amazon Web Services
Operational
AWS ec2-ap-southeast-2
Operational
AWS ec2-ap-southeast-1
Operational
AWS rds-ap-southeast-1
Operational
AWS rds-ap-southeast-2
Operational
AWS s3-ap-southeast-1
Operational
AWS s3-ap-southeast-2
Operational
Google Apps
Operational
Google Apps Gmail
Operational
Google Apps Docs
Operational
Google Apps Calendar
Operational
Google Apps Drive
Operational
Google Apps Sync for Mobile
Operational
Google Apps Vault
Operational
Google Apps Admin Console
Operational
Google Apps Groups
Operational
Google Apps Maps
Operational
Google Apps Sheets
Operational
CloudFlare
Operational
Cloudflare Sydney, NSW, Australia - (SYD)
Operational
Cloudflare Melbourne, VIC, Australia - (MEL)
Operational
Cloudflare Brisbane, QLD, Australia - (BNE)
Operational
Cloudflare Perth, WA, Australia - (PER)
Operational
Third-Party Conferencing and Messaging Services
Operational
Slack Connections
Operational
Slack Login/SSO
Operational
Slack Messaging
Operational
Zoom Cloud Recording
Operational
Zoom Zoom Connector for Polycom
Operational
Zoom Zoom Cloud Room Connector
Operational
Zoom Zoom Connector for Cisco
Operational
Zoom Live Streaming
Operational
Zoom Zoom Chat
Operational
Zoom Meeting Telephony Services
Operational
Zoom Zoom Meetings
Operational
Zoom Zoom Phone
Operational
Zoom Zoom Video Webinars
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.