SilverSky Services Status

Active Incident

Updated a few seconds ago

SilverSky - Security Advisory: Fortinet Firmware Updates and Ongoing Security HardeningOperational

Incident Status

Operational

Components

Managed Firewall, Network Management (WAN)

Locations

Managed Security Services

October 22, 2026 3:12PM UTC

INVESTIGATING

Security Advisory: Fortinet Firmware Updates and Ongoing Security Hardening SilverSky is aware of Fortinet's October 21, 2026, announcement regarding upcoming security updates addressing multiple vulnerabilities across FortiOS, FortiManager, FortiAnalyzer, and other Fortinet products. As part of our standard security hardening practices, SilverSky already implements multiple protective measures across our managed Fortinet environments, including trusted host restrictions, local-in policies, restricted administrative access, and additional security controls designed to minimize external exposure and reduce the risk of unauthorized access. These existing safeguards provide important layers of protection and help mitigate the potential risk associated with the vulnerabilities identified by Fortinet. In addition to these existing protections, SilverSky's Security Operations and Device Management teams are reviewing the updated firmware releases and coordinating plans to deploy applicable upgrades across our managed Fortinet environments. Upgrades will be prioritized based on potential exposure and risk, while following our established change management and validation procedures to minimize service disruption. We will continue to monitor Fortinet's security advisories and threat intelligence, evaluate potential exposure, and implement additional mitigation or remediation measures as appropriate. SilverSky remains committed to proactively protecting our customers' environments through ongoing security monitoring, preventative hardening measures, and timely security updates. Reference: Fortinet Security Hardening Announcement – October 21, 2026 https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products Thank you, SilverSky Support

SilverSky- Security Advisory - PHP VulnerabilityOperational

Incident Status

Operational

Components

Security Operations Center, MDR Monitoring Platform, EDR ( Endpoint Protection), Insight Vulnerability Management, Managed Firewall, Network Management (WAN), Fortinet EMS (Endpoint Management Server), RSA Tokens (MFA), Managed DUO, SilverSky EPS powered by Checkpoint, Archive, Email DLP ( Data Loss Protection), Email Encryption, Email (Spam/AV), Social Engineering Protection, Targeted Attack Protection, Intune, Sharepoint, O365, SilverSky Mail, Mimecast, Knowbe4, SMC (Security Management Portal), SMC (Managed Security) Reporting, SMC (Email Security Protection ) Reporting, Lightning/outSOC Portal, Hosted Infrastructure, Managed Microsoft Defender

Locations

Primary Data Center, Messaging Services, Managed Security Services, Portal Services, Hosted Infrastructure Services

October 22, 2026 12:54PM UTC

INVESTIGATING

Update 10/22/2026 @ 8:55 AM EDT All SilverSky internal production web portals using PHP have been patched. Thank you, SilverSky Support

October 21, 2026 9:10PM UTC

INVESTIGATING

PHP2Shell: critical PHP vulnerabilities Immediate patching is strongly recommended for affected PHP environments. CRITICAL CVE-2026-109618 • CVE-2026-109619 • CVSS 9.2 Customer action requested : Prioritize identification and patching of internet-facing systems, applications, and appliances that use PHP. Where PHP is embedded in a third-party product, follow the product vendor’s approved update guidance. What is happening: On 21 October the PHP project released fixes for two critical bugs in PHP itself, tracked as CVE-2026-109618 and CVE-2026-109619 and nicknamed PHP2Shell. An attacker can send one crafted web request to any PHP page and run commands on the server with the permissions of the web service. No account or password is needed. The request is handled before your application code runs, so application patches, maintenance mode and login pages do not protect you. Because the flaw is in PHP itself rather than in any one website or application, it affects every PHP version from 5.4 through 8.5.11 and every common way of running PHP: PHP-FPM, Apache with mod_php, php-cgi, LiteSpeed and FrankenPHP. Public websites, content management systems such as WordPress, Drupal and Joomla, e-commerce platforms, Nextcloud, webmail, hosting control panels such as cPanel and Plesk, and appliances or management consoles with PHP inside are all in scope. Internet-facing systems are the priority. Internal PHP servers are lower risk but still need the fix. Technical details leaked a day before the fix. Several security vendors have reported probing and early attack attempts since the morning of 21 October. No breach has yet been publicly confirmed with evidence, but attacks are expected to grow quickly now that the details are public. Web application firewall rules can reduce exposure to the known techniques. They are not a replacement for the update. Recommended Customer Actions: 1. Identify every internet-facing system, application, container and appliance that uses PHP, including PHP embedded in third-party products. Plesk and Nextcloud have confirmed they are affected. The NCSC-NL tracker (linked below) lists other products as vendors respond. 2. Update PHP to 8.5.12, 8.4.27, 8.3.36 or 8.2.35, or apply the security update from your operating system or product vendor. 3. Fully restart PHP-FPM, Apache, LiteSpeed or the container after updating. A reload is not enough. 4. Where PHP is embedded and cannot be updated directly, contact the software, appliance, hosting or managed-service provider for their approved update or workaround. 5. If you run PHP 8.1 or older, there is no official package. Source patches exist for 7.4, 8.0 and 8.1. Older versions have nothing. Until the server is replaced, put it behind a web application firewall, cap the request body size at the web server (8 MB or less unless the site needs large uploads), and block file uploads the site does not need. Do not lower the PHP memory limit as a workaround. A low memory limit combined with a large allowed request size is one of the conditions the exploit needs. If none of that is possible, take the server offline. 6. Before you patch an internet-facing server, look for signs of compromise: new or changed .php files in recent days, cron jobs you do not recognize, PHP error logs with "Allowed memory size" messages that end in "Unknown on line 0", repeated web server worker crashes, and web server processes making outbound connections. A successful attack can leave none of these, so patching is still the priority. If you find any of them, isolate the server and contact the SOC before cleaning up. 7. Keep watching exposed systems, web logs, sign-in activity and vendor advisories for suspicious behavior or new guidance. 8. Tell us which of your internet-facing systems run PHP so we can prioritize our checks. Open a ticket if you need help confirming a version, applying the update or checking a server. SilverSky’s Actions : • SilverSky has activated its incident response process for this event. • We are reviewing our own systems and services for PHP exposure, applying emergency patches where updates are available, assessing vendor-managed technologies, and putting risk-reduction measures in place where immediate patching needs additional coordination. • We are searching the firewall, intrusion prevention, web application firewall, web server, Linux and endpoint logs we receive from your environment for exploitation attempts and for the activity that follows a successful attack. We will contact you directly if we find anything in your environment. • We are adding detection rules for this activity to our monitoring platform. • We are tracking public threat intelligence, vendor advisories, CISA guidance and new detection methods, coordinated across our security, engineering, operations, compliance and vendor-management teams. Continuing updates This is a fast-moving situation. Information about affected products, exploitation activity, detection methods and vendor patches will change as research continues. We will update this notice on the SilverSky status page when there are material developments or when customer action is needed, and we will contact affected customers directly if we find anything in their environment. Thank you, SilverSky Support

October 21, 2026 5:34PM UTC

INVESTIGATING

Update 10/21/2026 @ 1:30PM EDT SilverSky is aware of the recent vulnerabilities with PHP and has engaged its incident response team to review the situation and begin emergency patching. As this is a developing situation, information is constantly evolving and we will communicate more once we have details to share. Thank you, SilverSky Support

Security Advisory Update: Ongoing FortiBleed CampaignOperational

Incident Status

Operational

Components

Managed Firewall, Network Management (WAN)

Locations

Managed Security Services

October 13, 2026 5:44PM UTC

MONITORING

Update 10/13/2026@ 1:45PM EDT Dear Valued Customer, SilverSky would like to provide an update regarding the ongoing FortiBleed campaign targeting Fortinet FortiGate firewalls and VPN infrastructure. As previously communicated in our June 22, 2026, notification, SilverSky has implemented multiple security measures to help protect our managed Fortinet environments against potential compromise. On October 6, 2026, the FBI and U.S. Secret Service issued an updated cybersecurity advisory confirming that this campaign remains active. While the advisory does not appear to identify a new vulnerability, it reinforces the importance of maintaining appropriate security controls and remaining vigilant against potential threats. SilverSky continues to maintain security measures designed to reduce the risk of unauthorized access, including regular firmware updates, multi-factor authentication, administrative access restrictions, credential management, and security monitoring, as applicable to the managed environment. Our Security Operations and Device Management teams continue to review the latest threat intelligence, evaluate potential exposure across applicable managed environments, and implement additional mitigation or remediation measures as appropriate. SilverSky remains committed to protecting our customers' environments and will continue monitoring developments related to this campaign. Should any potential security concerns be identified, we will coordinate appropriate next steps with affected customers. If you have any questions or concerns, please contact SilverSky Support. Thank you, SilverSky Support

Security Operations Center

Managed Security Services

Operational

MDR Monitoring Platform

Managed Security Services

Operational

EDR ( Endpoint Protection)

Managed Security Services

Operational

Insight Vulnerability Management

Primary Data Center

Operational

Managed Firewall

Managed Security Services

Operational

Network Management (WAN)

Managed Security Services

Operational

Fortinet EMS (Endpoint Management Server)

Managed Security Services

Operational

RSA Tokens (MFA)

Managed Security Services

Operational

Managed DUO

Managed Security Services

Operational

SilverSky EPS powered by Checkpoint

Messaging Services

Operational

Scheduled Maintenance

No Anticipated Service Impact - [CCB 3081] - SDM Update to Security Template and Quarterly Maintenance Q3Planned Maintenance

Schedule

August 5, 2026 12:00AM - September 9, 2026 11:30PM UTC

Components

Managed Firewall

Locations

Managed Security Services

Description

SilverSky will be performing our Quarterly Maintenance to rotate passwords and make changes to the default template. These changes will not be impactful to traversing traffic or uptime. For any additional information during the maintenance please visit the status.io page for status updates -> status.silversky.com If you have any questions, please call support at 1-800-234-2175 option 2, option 3.

Service Impact - [CCB 3269] - USDC3 (Richmond) - Customer Edge Switch Upgrade 10.5(6)Planned Maintenance

Schedule

October 31, 2026 1:00AM - 7:00AM UTC

Components

Network Management (WAN)

Locations

Managed Security Services

Description

During this maintenance window we will be upgrading a Core Customer Edge Swith to 10.5(6) within the Richmond datacenter. Customers will experience an interruption of 15 minutes during the switch reload. For any additional information during the maintenance please visit the status.io page for status updates - > status.silversky.com If you have any questions, please call support at 1-800-234-2175 option 2, option 3.

History (Last 7 days)

Service Impact - [CCB 3249] - USDC3 (Richmond) - Critical Patching External Cisco SwitchesPlanned Maintenance

Description

During this maintenance window we will be applying critical Cisco Security Patches to Core switches in the Richmond datacenter. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-nxosw1-cWzSbtR This activity will cause the Richmond external environment will go down briefly. Richmond VPN Customers tunnels and any services on External environment will be down briefly. For any additional information during the maintenance please visit the status.io page for status updates -> status.silversky.com If you have any questions, please call support at 1-800-234-2175 option 2

Components

Managed Firewall, Network Management (WAN)

Locations

Managed Security Services

Schedule

October 16, 2026 1:00AM - October 16, 2026 8:00AM UTC

October 16, 2026 8:00AM UTC

UPDATE

The following maintenance (CCB 3249) Critical Patching Cisco Switches has completed.

October 16, 2026 1:00AM UTC

UPDATE

The following maintenance (CCB 3249) Critical Patching Cisco Switches has started.

StatusHistory