Is LibraCyber down?

Since October 14, around 08:00 UTC, some users who report a phishing simulation receive the confirmation email ("Spot on!") several times. A third-party email delivery service sends the same report to our platform multiple times, and each copy triggers a confirmation email. Reports are recorded correctly, and users don't need to do anything. The repeated emails are harmless and can be ignored. We are deploying a fix so that only one confirmation email is sent per report. We are also working with our email delivery provider on the root cause. We will post an update once the fix is live.

We have prepared a fix that sends only one confirmation email per reported simulation, even when the same report reaches our platform several times. It is in review and will be deployed shortly. Until the fix is live, some users may still receive repeated confirmation emails after reporting a simulation. Reports are recorded correctly, and the repeated emails can be ignored. We are also working with our email delivery provider on the root cause. We will post an update once the fix is deployed.

Since October 14 around 08:00 UTC, some users who reported a phishing simulation received the confirmation email ("Spot on!") several times, sometimes every 20 to 25 minutes for several hours. Our email provider delivered the same report to our platform many times, and we sent a confirmation for each delivery. We have deployed a fix: a simulation now triggers one confirmation email only, however many times the report reaches us. Reports already received are recorded correctly, and simulation results and dashboards are not affected. Users who reported a real (non-simulated) email may still receive the acknowledgement more than once while we finish a second fix. We are working with our email provider on the underlying cause and are monitoring the situation.

Resolved – Since October 14 around 08:00 UTC, some users who reported a phishing simulation received the confirmation email ("Spot on!") several times. Our email provider delivered the same report to our platform many times, and we sent a confirmation for each delivery. We deployed a fix on October 15 at 10:17 UTC: each reported simulation now triggers a single confirmation email, however many times the report reaches us. We have monitored the platform since then and observed no further repeated confirmations. Simulation results were not affected. We are following up with our email provider on the underlying cause and will add further safeguards against repeated deliveries. We apologize for the inconvenience.

Since approximately 18:15 CEST on 10 September, videos embedded in courses are not playing. When opening a video lesson, users see the message "Sorry, this video doesn't exist". All other platform functions, including login, navigation, quizzes and reporting, are working normally. We are working with the provider to restore playback and will update this notice as soon as the service is back.

Course videos are available again: since 21:45 CEST they are being served through a fallback streaming server. Users who had a lesson open before that time need to close and reopen it. While on the fallback, some users may experience slower video loading, and a very small number of videos may be temporarily unavailable. We are continuing to work with the video provider to restore the standard service, and we will update this notice when it is back.

Video playback has been restored on the standard service as of 22:45 CEST. Course videos are playing normally again. Users who had a lesson open before that time need to close and reopen it. No data was lost and no other action is required. We apologise for the inconvenience.

As a precautionary security measure, the "Forgot password" self-service function on the platform login page has been temporarily disabled. Impact: users who do not remember their password cannot reset it autonomously. Login with existing credentials and all other platform features are working normally. Workaround: company administrators can reset user passwords directly from the administration panel. Alternatively, please contact our support team: https://support.libracyber.com/hc/en-us/requests/new We are working to safely restore the functionality and will post updates here.

The permanent fix for this issue has been fully validated and is scheduled for deployment during a maintenance window on Friday, August 28, 18:00–24:00 CEST. Following the upgrade, self-service password recovery ("Forgot password") will be progressively re-enabled across all customers, and we expect the feature to be fully restored shortly after the maintenance window. In the meantime, password resets performed by your platform administrators continue to work normally.

With tonight's upgrade of the authentication platform completed, the "Forgot password" (self-service password recovery) feature has been re-enabled for all tenants as of 20:20 CEST. The feature had been temporarily suspended on 25 August in preparation for this upgrade. Users can again reset their password through the standard self-service flow. We thank you for your patience.