GitHub Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

GitHub Issues Reports

Latest outage, problems and issue reports in social media:

• 
  edos (@DOSHostNet) reported 6 minutes ago

  Great response! First 100 get free plus for a year 🪎. I update users a few times a day. Log back in to check. We will never Contact you outside the website. No Emails, No text, No GitHub BOT on the server. Don’t fall for internet scams!

• 
  camjo (@camjodev) reported 7 minutes ago

  @lukecodez Then they’ll charge for github bro I’m good honestly Not paying for that service when it’s down half the time

• 
  mRr3b00t (@UK_Daniel_Card) reported 7 minutes ago

  Dan's daily threat briefing: Today is August 20, 2026. Let me gather intel across the categories in parallel. Searched the web, updated tasks · 4 notes Sent notification 4 actively-exploited flaws hit CISA KEV (Aug 18) with an FCEB deadline of TOMORROW, Aug 21. Highest priority: VMware vCenter CVE-2026-59310 (9.8, path-traversal RCE) — suspected China-nexus APT dropping backdoors and Babuk-derived ransomware across 361 victims/47 countries; and Windows IKE CVE-2026-33824 (9.8, network RCE double-free). Also SharePoint CVE-2026-55040 (9.1, PoC public) and macOS Screen Sharing CVE-2026-65400 (9.8, auth bypass → cryptominers). Patch/isolate vCenter and apply Aug Patch Tuesday now. Separately: Cisco published two CVSS-10.0 advisories Aug 19 (Crosswork, Secure Workload), and the "Shai-Hulud" npm worm (keyv/cacheable, 400+ packages) is still active — rotate CI/CD and cloud creds if exposed. Full briefing in session. Daniel's Daily Threat Intel & CVE Briefing — Thu 20 Aug 2026 Top of the stack: CISA added four actively-exploited CVEs to KEV on Aug 18 with an FCEB remediation deadline of tomorrow, Aug 21. The one to move on first is VMware vCenter CVE-2026-59310 (9.8) — a suspected China-nexus APT is using it for unauthenticated RCE, dropping reverse_ssh backdoors and Babuk-derived ransomware (361 victims across 47 countries). Windows IKE CVE-2026-33824 (9.8, network RCE) is close behind. If you run vCenter exposed or unpatched, isolate/patch it today. 1. CISA KEV / Actively exploited (all four added Aug 18, deadline Aug 21) CVE-2026-59310 — Broadcom VMware vCenter, CVSS 9.8, exploited. Path traversal → unauthenticated arbitrary code execution. Suspected China-nexus APT deploying backdoors + Babuk-derived ransomware; ~361 victim IPs/47 countries. So what: crown-jewel virtualization infra with in-the-wild ransomware chains — patch or network-isolate now. CVE-2026-33824 — Microsoft Windows IKE Service Extensions, CVSS 9.8, exploited. Double-free → unauthenticated network RCE. Reported use by a Chinese-speaking actor running AI-assisted intrusion campaigns. So what: wormable-class network RCE on Windows; ensure Aug Patch Tuesday is deployed. CVE-2026-55040 — Microsoft SharePoint Server, CVSS 9.1, exploited (public PoC). Weak-authentication security-feature bypass over the network. So what: SharePoint remains a repeat initial-access target; prioritise internet-facing farms. CVE-2026-65400 — Apple macOS Screen Sharing, CVSS 9.8, exploited. Improper authentication → network auth bypass; observed dropping Monero miners. So what: patch macOS fleet and disable/segment Screen Sharing where not required. 2. Edge / network gear Cisco (published Aug 19) — two CVSS 10.0 hardening advisories: Crosswork (CVE-2026-20030/-20357/-20358/-20359) and Secure Workload (CVE-2026-20231/-20315/-20317/-20318/-20319); plus High BroadWorks XXE CVE-2026-20320 (7.5). No confirmed in-the-wild exploitation yet, but these are max-severity — schedule upgrades. So what: management-plane and workload-security appliances at 10.0 are prime pivot points. No new Fortinet/Palo Alto/Ivanti/Citrix/SonicWall/F5 critical in the last 24–48h that corroborated against a primary source. (The Fortinet FortiSandbox / Ivanti Sentry criticals circulating in search are from June 2026 — not today's news.) 3. Microsoft / Windows / Active Directory August Patch Tuesday (Aug 11) context still relevant this week: CVE-2026-68820 (afd.sys use-after-free, local EoP to SYSTEM) is the confirmed exploited zero-day — verify it's deployed. Publicly-disclosed CVE-2026-62832(User Profile Service, LPE) is likely-to-be-exploited. Notable server RCEs: CVE-2026-62878 (Windows DNS), CVE-2026-62893 (WDS TFTP), plus Exchange EoP CVE-2026-62911. So what: if your Aug rollout slipped, afd.sys + the DNS/Exchange items are the priority chain. 4. Web / cloud / DevOps "Shai-Hulud" npm supply-chain worm — keyv / cacheable ecosystem, ongoing since Aug 4 and still active. 400+ packages compromised (keyv 6.0.0, cache-manager 7.2.10, cacheable-request 13.0.20, various @ornikar/@qlik scopes). Self-propagating worm steals cloud creds, CI/CD tokens, AI config files and wallets; persists via Claude Code hooks and VS Code tasks, exfiltrates through hijacked GitHub accounts. So what:pin/remove affected versions, rebuild suspect build agents, and rotate any CI/CD and cloud credentials that touched a build in that window. (CSA Singapore AD-2026-009 tracking.) Watch / developing Cisco Crosswork/Secure Workload 10.0s have no confirmed exploitation yet — treat as urgent-patch, not incident, unless that changes. The Ray-Project CVE-2025-62593 (8.8) appeared in KEV-adjacent weekly tracking but wasn't in the Aug 18 CISA alert — corroborate before actioning. Keep watching for a fresh edge-VPN KEV entry given ongoing ransomware targeting of Palo Alto/Fortinet/Citrix gateways. Sign-off: 4 items flagged as actively exploited today (all four Aug 18 KEV additions), with a federal patch deadline of Aug 21. Sources: CISA — Four KEV additions, Aug 18 2026 The Hacker News — macOS/SharePoint/vCenter/IKE under active exploitation Senserva — CISA KEV additions, week of Aug 18 Cisco — Advance notification, Aug 19 2026 advisories SecurityWeek — August 2026 Patch Tuesday (exploited zero-day) Wiz — keyv/cacheable npm supply-chain (Shai-Hulud) CSA Singapore — AD-2026-009 npm Shai-Hulud worm

• 
  AminTechs (@AminTechs) reported 10 minutes ago

  @HelloVyom The card is generated. The SkillEvaluator warn-only path is from the GitHub issue — a failing skill still loads. The picture isn't a session I sat through.

• 
  Lucas G (@lucas_gr_) reported 11 minutes ago

  It was a blast working on a ton of things without any rules for a few hours, just following my curiosity... now I promise I'll get back on track! I tried to push all the ideas I had in my head and wanted to execute for a while to version 1.0, tracking everything with my Second Brain so I can calmly decide on priorities and pick up where I left off Things I worked on: -Built a small digital product: researched a problem from scratch using Google data, mapped pain points via Reddit, built and launched the product, with a test Meta Ad already running -Created the Second Brain version for SMMs (again, mapping their pain points) -Set up a Telegram Bot to send my voice notes to Claude even when I'm out and about -Got Claude running on the VPS (and sent a "good morning" prompt at 5:30 AM so my session would reset at 10:30 AM) -Upgraded my personal website to v1.1 -Created a presale page for the Corporate Second Brain (for the Italian market) -Put together a portfolio PDF for my outreach system -Adapted a trading bot, pulling the best ideas from GitHub and best practices from Reddit (I'll leave it in testing until the end of the year and progressively put real money into it starting in 2027, little by little) -Worked on a vibecoded website idea I've been testing for two weeks -Built v1.0 of a last-minute idea that popped up last night -Finished the remote job search system for Italians (adapted from a GitHub repo I found) I swear it was only because I didn't want to waste the tokens...back to being focused now 😮‍💨

• 
  headsetpipeline (@headsetpipeline) reported 12 minutes ago

  This all checks out from a gtm perspective. Just went from selling to ai-natives + mid-market firms to true enterprises An ai-native firm doesn’t ever tell you they have ai-initiatives to tie to, it’s just product goals and roadmap projects Mid-market software companies (think large do io’s of the world) and some mid-market product companies have some semblance of a cogent ai strategy and it’s usually departmental. Eg: platform team wants to help their sales team do xyz, or product team wants to embed abc, etc Now enterprise size companies outside of sharp digital natives like figma, github, etc are so beyond cooked when they bring up “ai-initiatives”. The primary problem is that real economy enterprises like meat processors in Colorado attract D-players, have eng teams that are deep cost centers bc they produce meat, and D-players with no budget need to take 12 months rolling out Copilot.

• 
  Bash (@bashirbuilds) reported 14 minutes ago

  @sridharfyi The way I’m approaching it with Reeno is to monitor the actual services and workflows the product depends on, not just whether the website is up. So if something like a Stripe webhook, OAuth refresh, GitHub sync or AI request starts failing, Reeno groups the evidence into one clear Problem, shows what part of the product may be affected, and then verifies Recovery when successful signals return.

• 
  Tech gets old (@GetsTech) reported 15 minutes ago

  I asked Claude to autonomously complete about 15 very simple github UI issues overnight, do all the work in a single branch, and commit it all in a single PR. When I woke up it did four of them and had decided that was enough and gave me pathetic reason why it wouldn't do more. Brutal.

• 
  Marvito (@larrybson21) reported 16 minutes ago

  @officialmarolee GitHub went down on August 17th. Tell me the date you saw in Cursor’s post announcing the launch of Origin. 🌚

• 
  Kọ́ládé Chris 🇻🇦 (@Ksound22) reported 17 minutes ago

  I can't even do gir push right now. Is GitHub down again?

• 
  Big Deen (@itxDeeni) reported 17 minutes ago

  What a time to be alive. Learning has genuinely never been better. Watching old courses with AI-assisted IDEs is a completely different experience from what it used to be. Previously, you could waste hours Googling, digging through Stack Overflow, checking docs and GitHub issues, trying to figure out why the instructor’s code doesn’t work locally because the ecosystem moved on and some things got deprecated. Now, your AI assistant is right there in your IDE. You can ask it what changed, pull up the current approach, and adapt the code to what actually works today. And honestly, this is especially powerful for backend engineering. You don't have to avoid older courses anymore just because they're using older versions. You can extract the actual engineering concepts, architecture, authentication, testing, database design, dependency injection, patterns and have AI translate the implementation into today's ecosystem. The important distinction: don't let AI replace the struggle of understanding. Let it replace the struggle of debugging obsolete tutorial code. You focus on learning. AI handles the archaeology.

• 
  Masfiq Mahmud (@masfiq018) reported 18 minutes ago

  @JonathanGeige18 @github ikr.. People were telling me that GitHub was falling apart, but I didn't believe them until I was the one getting affected with their GitHub actions outage And now I am starting to believe. Their old ceo left and it's started to get even worse now

• 
  Loong🐉 (@LoongUp) reported 27 minutes ago

  @rauchg love the meta-loop - Origin ships on Vercel, Vercel hosts Origin. github outage was free marketing for this launch.

• 
  Kevin VZB (@kevinvzb) reported 27 minutes ago

  What I wan't to know about Cursor Origin is how soon it can replace GitHub Actions. Code hosting isn't really the issue.

• 
  Teknium 🪽 (@Teknium) reported 28 minutes ago

  @Cobalt_Peak Sorry about the delay - its in now. Github outage has been a PITA!