Kaseya incident
Datto RMM - Syrah, Vidal - 15.0.1 Cagservice.exe being flagged as malicious (Rapidstop) by Microsoft Defender for Endpoint
Major Vendor's status page →
Resolved after 15 days 22 hours, on June 29, 2026.
A fix has been implemented and we are monitoring the results.
Update timeline
- investigating Jun 29, 2026, 04:02 PM UTC
We are aware of a problem where Datto RMM's 15.0.1 Cagservice.exe is being flagged as malicious (Rapidstop) by Microsoft Defender for Endpoint. The Kaseya R&D Team are investigating this issue. Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/
- investigating Jun 29, 2026, 04:07 PM UTC
We are continuing to investigate this issue.
- identified Jun 29, 2026, 07:36 PM UTC
The issue has been identified and a fix is being implemented.
- monitoring Jun 29, 2026, 10:47 PM UTC
A fix has been implemented and we are monitoring the results.
- resolved Jul 15, 2026, 02:25 PM UTC
This incident has been resolved.
Your product runs on more than Kaseya
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services