Security & Incidents
A single queue for IT, cyber and AI incidents, with the live mediation blocks folded in.
Incident queue (24)
IT · cyber · AI in one list, each traceable to an asset
- criticalcyberMalware detection on managed endpointopenINC-4207 · 6h old
Endpoint quarantined pending review.
API Gateway →impact Regulatory reportable · assignee N. Bhatt · opened 2026-09-10 02:00 UTC - informationalitChange caused service degradationopenINC-4216 · 13h old
Post-change error rate above baseline.
Endpoint Fleet →impact Regulatory reportable · assignee E. Moreau · opened 2026-09-09 19:00 UTC - informationalcyberFirewall rule drift detectedmitigatedINC-4223 · 1d old
Ingress rule differs from approved baseline.
Cloud Landing Zone →impact Internal only · assignee L. Marchetti · opened 2026-09-08 23:00 UTC - warningitBackup verification failedopenINC-4218 · 1d old
Restore test did not complete.
Fraud Signal Summariser →impact Customer-facing · assignee N. Bhatt · opened 2026-09-08 22:00 UTC - informationalcyberData egress spike to unknown endpointclosedINC-4208 · 1d old
Egress volume outside baseline.
Field Engineer Assistant →impact Regulatory reportable · assignee A. Petrova · opened 2026-09-08 21:00 UTC - informationalaiUnregistered AI endpoint observedclosedINC-4213 · 2d old
Shadow AI egress from a business unit.
Invoice Archive →impact Regulatory reportable · assignee R. Vermeer · opened 2026-09-08 02:00 UTC - informationalitBatch invoice run failedopenINC-4201 · 2d old
Nightly rating job aborted at 62% completion.
Core Router Fabric →impact No user impact yet · assignee S. Nakamura · opened 2026-09-07 17:00 UTC - warningcyberAnomalous privileged login out of hoursopenINC-4206 · 4d old
Privileged session from unusual source.
API Gateway →impact Customer-facing · assignee E. Moreau · opened 2026-09-06 00:00 UTC - criticalitElevated latency on customer-facing APIinvestigatingINC-4200 · 4d old
p95 latency above 1.2s for authenticated reads.
CRM Core →impact Regulatory reportable · assignee T. Alvarez · opened 2026-09-05 21:00 UTC - warningitDisk saturation on cluster nodeopenINC-4203 · 4d old
Node approaching capacity threshold.
API Gateway →impact Customer-facing · assignee T. Alvarez · opened 2026-09-05 19:00 UTC - informationalaiCross-zone request blockedopenINC-4219 · 5d old
Dev-zone agent attempted a restricted-zone tool.
Billing Dispute Copilot →impact Internal only · assignee D. Okonkwo · opened 2026-09-05 07:00 UTC - informationalitIntermittent authentication failuresopenINC-4202 · 5d old
Token exchange failures on the identity edge.
Email Security Gateway →impact No user impact yet · assignee N. Bhatt · opened 2026-09-05 02:00 UTC - informationalcyberPhishing campaign targeting finance staffopenINC-4205 · 5d old
Credential-harvest lures observed in mail flow.
Identity Provider →impact Regulatory reportable · assignee L. Marchetti · opened 2026-09-04 21:00 UTC - warningcyberExposed storage bucket detectedinvestigatingINC-4209 · 5d old
Public read discovered on a landing-zone bucket.
Contact Centre QA Scorer →impact Internal only · assignee D. Okonkwo · opened 2026-09-04 20:00 UTC - informationalitReplication lag on primary datastoremitigatedINC-4204 · 5d old
Read replicas trailing the primary.
Payments Gateway →impact No user impact yet · assignee C. Iversen · opened 2026-09-04 14:00 UTC - informationalitThird-party provider degradationmitigatedINC-4220 · 6d old
Upstream provider reporting reduced capacity.
Customer Portal →impact Internal only · assignee A. Petrova · opened 2026-09-04 07:00 UTC - informationalaiGuardrail breach: prompt-injection attemptclosedINC-4210 · 6d old
Injection pattern quarantined at the mediation layer.
Container Platform →impact No user impact yet · assignee C. Iversen · opened 2026-09-03 14:00 UTC - criticalaiRAG knowledge source staleinvestigatingINC-4214 · 7d old
Retrieval corpus not refreshed within SLA.
Event Streaming Bus →impact Internal only · assignee R. Vermeer · opened 2026-09-02 13:00 UTC - informationalaiAgent attempted out-of-scope tool callclosedINC-4211 · 8d old
Effective-permission intersection denied the call.
Payments Gateway →impact Customer-facing · assignee S. Nakamura · opened 2026-09-02 08:00 UTC - warningaiHallucination rate above thresholdclosedINC-4212 · 8d old
Ungrounded answer rate exceeded control limit.
Fraud Signal Summariser →impact Internal only · assignee T. Alvarez · opened 2026-09-01 15:00 UTC - criticalcyberVulnerability scan overduemitigatedINC-4221 · 8d old
Asset missed its scan window.
Partner B2B Gateway →impact Internal only · assignee T. Alvarez · opened 2026-09-01 12:00 UTC - informationalitCertificate expiry warningopenINC-4217 · 9d old
Edge certificate approaching expiry.
Field Engineer Assistant →impact No user impact yet · assignee R. Vermeer · opened 2026-09-01 05:00 UTC - warningaiToken spend above daily budgetopenINC-4215 · 9d old
Cost guardrail tripped for a production assistant.
Network Inventory →impact Regulatory reportable · assignee R. Vermeer · opened 2026-08-31 16:00 UTC - informationalaiSemantic quality drop after prompt changeclosedINC-4222 · 9d old
Quality score fell after a prompt version bump.
API Gateway →impact No user impact yet · assignee T. Alvarez · opened 2026-08-31 13:00 UTC
Findings by severity
AI guardrail events
From the mediation layer
- infoAgent answered "I don't know" — upstream unavailableasset →
- blockedAgent tool call denied by policy intersectionasset →
- blockedGuardrail triggered: PII maskingasset →
- blockedAgent tool call denied by policy intersectionasset →
- blockedGuardrail triggered: PII maskingasset →
- infoAgent answered "I don't know" — upstream unavailableasset →
- blockedAgent tool call denied by policy intersectionasset →
- blockedGuardrail triggered: PII maskingasset →
- blockedAgent tool call denied by policy intersectionasset →
- blockedGuardrail triggered: PII maskingasset →
- blockedGuardrail triggered: PII maskingasset →
- blockedAgent tool call denied by policy intersectionasset →
Live blocked requests
Mediated calls denied in this session
No blocked call yet.
Use the trigger buttons above.