Kaseya incident

Datto RMM - Syrah, Vidal - 15.0.1 Cagservice.exe being flagged as malicious (Rapidstop) by Microsoft Defender for Endpoint

Major Resolved View vendor source →

Kaseya experienced a major incident on June 29, 2026, lasting 15d 22h. The incident has been resolved; the full update timeline is below.

Started
Jun 29, 2026, 04:02 PM UTC
Resolved
Jul 15, 2026, 02:25 PM UTC
Duration
15d 22h
Detected by Pingoru
Jun 29, 2026, 04:02 PM UTC

Update timeline

  1. investigating Jun 29, 2026, 04:02 PM UTC

    We are aware of a problem where Datto RMM's 15.0.1 Cagservice.exe is being flagged as malicious (Rapidstop) by Microsoft Defender for Endpoint. The Kaseya R&D Team are investigating this issue. Subscribe to the Kaseya Status Page for up-to-date information at https://status.kaseya.com/

  2. investigating Jun 29, 2026, 04:07 PM UTC

    We are continuing to investigate this issue.

  3. identified Jun 29, 2026, 07:36 PM UTC

    The issue has been identified and a fix is being implemented.

  4. monitoring Jun 29, 2026, 10:47 PM UTC

    A fix has been implemented and we are monitoring the results.

  5. resolved Jul 15, 2026, 02:25 PM UTC

    This incident has been resolved.