Lacework incident

Drop in number of CVEs being detected

Major Resolved

Lacework experienced a major incident on November 21, 2024, lasting 5d 22h. The incident has been resolved; the full update timeline is below.

Started
Nov 21, 2024, 03:45 AM UTC
Resolved
Nov 27, 2024, 02:16 AM UTC
Duration
5d 22h
Detected by Pingoru
Nov 21, 2024, 03:45 AM UTC

Update timeline

  1. monitoring Nov 21, 2024, 03:52 AM UTC

    We are currently investigating the issue.

  2. monitoring Nov 21, 2024, 06:18 PM UTC

    A fix for the issue has been deployed to production and its expected to take a few hours for vulnerability detections to get back to normal in customer environments.

  3. monitoring Nov 22, 2024, 03:21 AM UTC

    Issue has now been resolved

  4. monitoring Nov 26, 2024, 02:43 AM UTC

    A reduction in CVEs detected currently affects customers with machines in debian: 11, 12, 13. Engineering has deployed a fix and re-evalutions of the data is in progress.

  5. monitoring Nov 27, 2024, 02:19 AM UTC

    Services have been recovered. All scans going forward will detect Debian vulnerabilities.