Is GravityZone Down?

The incident has been resolved. Email processing is no longer experiencing delays. --- [2026-11-13T13:10:03.457Z] (monitoring) Email processing is showing signs of improvement. We are now processing the queues. --- [2026-11-13T07:50:22.211Z] (identified) An ongoing Microsoft outage is impacting services from GravityZone Services affected: - <a href="https://www.bitdefender.com/business/support/en/77209-452343-the-o365-sensor.html">O365 sensors</a> - Extended Email Security: Mail processing for Mesh 365 and Mesh Unified at mailbox level is currently impacted. Mail processing for Mesh Gateway is not impacted to the same extent although we are seeing some SMTP connectivity issues when delivering email into Microsoft tenants. Reference for MS incident: <a href="https://x.com/MSFT365Status/status/2120938282204688468">X post</a> / <a href="https://status.cloud.microsoft/m365/referrer=serviceStatusRedirect">m365 Status Page</a> Outage was first reported by Microsoft at 17:54 UTC on November 12

All GravityZone Cloud instances have been updated with the patched PHP version. All mitigations are now removed. Thank you for your continuous trust. --- [2026-10-21T11:04:14.344Z] (monitoring) The <a href="https://www.bitdefender.com/en-us/business/submit">sample submission</a> functionality is disabled too --- [2026-10-21T10:58:45.018Z] (monitoring) The support form in the console is also affected. In order to reach Bitdefender Support, use any of the channels listed here: <a href="https://www.bitdefender.com/business/support/en/71263-463883-how-to-open-a-case-with-bitdefender-enterprise-support.html">How to open a case with Bitdefender Enterprise Support</a> --- [2026-10-21T11:01:12.771Z] (monitoring) On October 20, 2026, two critical remote code execution vulnerabilities in PHP were publicly announced, rated 9.2 (CVSS v4.0). Technical details have not yet been disclosed, and PHP has not published a workaround. As a precaution, we have applied mitigations and temporarily disabled all GravityZone Cloud capabilities that involve uploading files. Endpoint protection, policy enforcement, and detection continue to operate. Policy settings, exclusions, and rules can still be added manually; only CSV import is affected. We have found no evidence that these vulnerabilities have been exploited against GravityZone. <b>Why we did this</b> These vulnerabilities could allow remote code execution, and their full scope is not yet known. Until fixed PHP versions are deployed and validated across our infrastructure, we chose to remove the exposure created by file uploads rather than accept that risk for your environment and our platform. <b>What happens next</b> The restriction is temporary. We will re-enable these capabilities once the fix is deployed and will notify you when that happens. <b>What you need to do</b> No action is required on your side. We apologize for the inconvenience and appreciate your understanding.

This incident has been resolved. --- [2026-10-20T17:49:09.256Z] (monitoring) A fix has been implemented and we are monitoring the results. Slight degradation might still be noticed. --- [2026-10-20T17:03:30.447Z] (investigating) We are investigating an issues that is causing slowdown while using the platform and login issues.