{"id":"INC-aquasec-5bnr1bqk4thx","kind":"incident","aliases":[],"related":[],"title":"Aqua Security: Aqua Wave is Monitoring Elevated Azure AD Error Rates","description":"The Azure AD incident appears to be largely resolved and CSPM scans are completing as scheduled at this point. Please note that you may continue to see \"New Risk\" alerts if the scan checks have toggled between \"unknown\" and failing states.","summary":null,"severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Aqua Security","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["aquasec","incident","ops","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2021-03-15T20:54:27+00:00","first_seen_at":"2026-11-08T17:00:34+00:00","triaged_at":"2026-11-08T17:05:20+00:00","updated_at":"2026-11-08T17:05:20+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'5bnr1bqk4thx':15A 'ad':9A,24C 'alert':51C 'appear':26C 'aqua':1A,3A,16A 'aquasec':14A,18B 'azur':8A,23C 'check':55C 'complet':35C 'continu':46C 'cspm':32C 'elev':7A 'error':10A 'fail':61C 'inc':13A 'inc-aquasec-5bnr1bqk4thx':12A 'incid':19B,25C 'larg':29C 'may':45C 'monitor':6A 'new':49C 'note':42C 'op':20B 'pleas':41C 'point':40C 'rate':11A 'resolv':30C 'risk':50C 'scan':33C,54C 'schedul':37C 'secur':2A 'security':17A 'see':48C 'state':62C 'toggl':57C 'unknown':59C 'vendor':21B 'wave':4A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["aquasecurity","security"],"ptokens":["aqua","security"],"labels":["aquasec","incident","medium","ops","vendor"],"campaign_type":null,"search_a":"'5bnr1bqk4thx':15A 'ad':9A 'aqua':1A,3A,16A 'aquasec':14A 'azur':8A 'elev':7A 'error':10A 'inc':13A 'inc-aquasec-5bnr1bqk4thx':12A 'monitor':6A 'rate':11A 'secur':2A 'security':17A 'wave':4A","search_b":"'aquasec':18B 'incid':19B 'op':20B 'vendor':21B","search_c":"'ad':24C 'alert':51C 'appear':26C 'azur':23C 'check':55C 'complet':35C 'continu':46C 'cspm':32C 'fail':61C 'incid':25C 'larg':29C 'may':45C 'new':49C 'note':42C 'pleas':41C 'point':40C 'resolv':30C 'risk':50C 'scan':33C,54C 'schedul':37C 'see':48C 'state':62C 'toggl':57C 'unknown':59C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2021-03-15T20:54:27+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"aquasec:5bnr1bqk4thx","url":"https://stspg.io/63j67wdhmcfp","severity":"medium","published_at":"2021-03-15T20:54:27+00:00","modified_at":"2021-03-15T21:51:31+00:00","first_seen_at":"2026-11-08T17:00:34+00:00","fetched_at":"2026-11-09T00:50:37+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}