{"id":"INC-apache-qsgjmyghmmr3","kind":"incident","aliases":[],"related":[],"title":"Apache Software Foundation: Widespread disruptions of services","description":"While global DDoS attacks continue to affect the ASF, we have applied mitigations and other tooling to address these issues more efficiently as they arise.","summary":"The Apache Software Foundation reports that ongoing global DDoS attacks have disrupted its services. The foundation says mitigations and tooling are being applied as attacks arise, and the incident is marked resolved.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Apache Software Foundation","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apache","asf-services","incident","security","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2025-11-13T16:59:58+00:00","first_seen_at":"2026-11-14T01:27:58+00:00","triaged_at":"2026-11-14T01:31:38+00:00","updated_at":"2026-11-14T01:31:38+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-14T01:31:38Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Apache Software Foundation: DDoS attacks disrupt several services","impact":"low","summary":"The Apache Software Foundation reports that ongoing global DDoS attacks have disrupted its services. The foundation says mitigations and tooling are being applied as attacks arise, and the incident is marked resolved.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["apache","asf-services"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Apache hosted services become intermittently unavailable during DDoS attacks","analyst_note":"","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":[],"who_is_affected":"Teams that depend on Apache Software Foundation hosted services such as downloads, repositories or project sites may see intermittent outages. The source does not name which services were hit or give a timeline. No action on your side is stated.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"unknown"},"cost_usd":0.00064,"input_tokens":4496,"output_tokens":380,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'address':71C 'affect':60C 'apach':1A,15B,23B 'apache':10A,12A 'appli':44B,65C 'aris':47B,78C 'asf':17B,62C 'asf-servic':16B 'attack':31B,46B,57C 'continu':58C 'ddos':30B,56C 'disrupt':5A,33B 'effici':75C 'foundat':3A,25B,37B 'foundation':14A 'global':29B,55C 'inc':9A 'inc-apache-qsgjmyghmmr3':8A 'incid':19B,50B 'issu':73C 'mark':52B 'mitig':39B,66C 'ongo':28B 'qsgjmyghmmr3':11A 'report':26B 'resolv':53B 'say':38B 'secur':20B 'servic':7A,18B,35B 'softwar':2A,24B 'software':13A 'tool':41B,69C 'vendor':21B 'widespread':4A","nicknames":[],"mitigations":[],"who_affected":"Teams that depend on Apache Software Foundation hosted services such as downloads, repositories or project sites may see intermittent outages. The source does not name which services were hit or give a timeline. No action on your side is stated.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["apachesoftwarefoundation","softwarefoundation"],"ptokens":["apache","foundation","software"],"labels":["apache","asfservices","incident","medium","security","vendor"],"campaign_type":null,"search_a":"'apach':1A 'apache':10A,12A 'disrupt':5A 'foundat':3A 'foundation':14A 'inc':9A 'inc-apache-qsgjmyghmmr3':8A 'qsgjmyghmmr3':11A 'servic':7A 'softwar':2A 'software':13A 'widespread':4A","search_b":"'apach':15B,23B 'appli':44B 'aris':47B 'asf':17B 'asf-servic':16B 'attack':31B,46B 'ddos':30B 'disrupt':33B 'foundat':25B,37B 'global':29B 'incid':19B,50B 'mark':52B 'mitig':39B 'ongo':28B 'report':26B 'resolv':53B 'say':38B 'secur':20B 'servic':18B,35B 'softwar':24B 'tool':41B 'vendor':21B","search_c":"'address':71C 'affect':60C 'appli':65C 'aris':78C 'asf':62C 'attack':57C 'continu':58C 'ddos':56C 'effici':75C 'global':55C 'issu':73C 'mitig':66C 'tool':69C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2025-11-13T16:59:58+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"apache:qsgjmyghmmr3","url":"https://stspg.io/ms3cb99lp1tf","severity":"medium","published_at":"2025-11-13T16:59:58+00:00","modified_at":"2026-02-14T18:49:13+00:00","first_seen_at":"2026-11-14T01:27:58+00:00","fetched_at":"2026-11-14T02:01:52+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}