{"id":"INC-circleci-wcsh4hxwkrh7","kind":"incident","aliases":[],"related":[],"title":"CircleCI: Mac jobs failing to start","description":"All Mac jobs are running successfully.\n\nOur infrastructure provider has confirmed that the DDoS attack has been mitigated and that services have been restored.\n\nThank you for your patience during this incident.","summary":"CircleCI reported that Mac build jobs were failing to start because of a DDoS attack on its infrastructure provider. The provider has since mitigated the attack and CircleCI reports all Mac jobs are running successfully again.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"CircleCI","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["ci","circleci","incident","macos","security","vendor"],"not_affected_if":["linux-only-jobs"],"how_to_check":"- unknown","fix":"- unknown","status":"resolved","published_at":"2026-06-01T01:04:39+00:00","first_seen_at":"2026-10-23T19:12:22+00:00","triaged_at":"2026-10-25T05:33:22+00:00","updated_at":"2026-10-25T05:33:22+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-10-25T05:33:22Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"internet","title":"CircleCI: Mac jobs failed to start during DDoS incident, now resolved","impact":"low","summary":"CircleCI reported that Mac build jobs were failing to start because of a DDoS attack on its infrastructure provider. The provider has since mitigated the attack and CircleCI reports all Mac jobs are running successfully again.","category":"vendor","nicknames":[],"who_cares":["circleci","ci","macos"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Mac build jobs fail to start; service disruption only","analyst_note":"","how_to_check":"- unknown","needs_analyst":false,"not_affected_if":["linux-only-jobs"],"who_is_affected":"Teams running macOS jobs on CircleCI were affected during the outage window; the sources describe a service availability problem, not a data exposure. unknown whether any customer data or credentials were involved.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000512,"input_tokens":3273,"output_tokens":370,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'attack':32B,43B,67C 'build':22B 'ci':12B 'circleci':1A,9A,11A,13B,18B,45B 'confirm':63C 'ddos':31B,66C 'fail':4A,25B 'inc':8A 'inc-circleci-wcsh4hxwkrh7':7A 'incid':14B,84C 'infrastructur':35B,60C 'job':3A,23B,49B,55C 'mac':2A,21B,48B,54C 'maco':15B 'mitig':41B,70C 'patienc':81C 'provid':36B,38B,61C 'report':19B,46B 'restor':76C 'run':51B,57C 'secur':16B 'servic':73C 'sinc':40B 'start':6A,27B 'success':52B,58C 'thank':77C 'vendor':17B 'wcsh4hxwkrh7':10A","nicknames":[],"mitigations":[],"who_affected":"Teams running macOS jobs on CircleCI were affected during the outage window; the sources describe a service availability problem, not a data exposure. unknown whether any customer data or credentials were involved.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-06-01T01:04:39+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"circleci:wcsh4hxwkrh7","url":"https://stspg.io/n3brb41nn16r","severity":"medium","published_at":"2026-06-01T01:04:39+00:00","modified_at":"2026-06-01T03:26:10+00:00","first_seen_at":"2026-10-23T19:12:22+00:00","fetched_at":"2026-10-26T04:45:23+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}