📢 Important Security Update: Preemptive Monitoring and System Status

Update timeline

1. investigating Oct 21, 2026, 02:39 PM UTC

   We want to share an important update regarding a newly discovered global vulnerability in PHP, a core programming language used by millions of websites and platforms across the internet. First and foremost: There has been no data breach at ChangeTower, and your data remains completely safe. Our security team is actively monitoring the situation in real time, and we have already deployed extra protective filters at our network layer. Because official patches from the PHP Foundation are still being finalized today, cyber security authorities worldwide have advised platforms to closely monitor traffic or temporarily isolate systems. Out of an abundance of caution and to ensure the total security of your data, ChangeTower may experience brief, temporary periods of planned downtime today if our monitoring teams determine a proactive shutdown is necessary. • **Is my data safe?** Yes. We have seen zero unauthorized access. This is a preemptive defense strategy, not a reaction to an incident. • **What should I expect?** If we take systems offline as a precaution, users will temporarily be unable to access their dashboards. • **When will this be resolved?** We are prepared to deploy the official permanent security patch the exact moment it is released by the core developers later today, minimizing any disruption to your events. We deeply appreciate your patience and understanding as we take these aggressive, proactive steps to keep your data entirely secure. We will keep this page updated with further developments.

2. resolved Oct 22, 2026, 01:06 AM UTC

   All ChangeTower systems have been patched against the critical PHP vulnerabilities disclosed today. Our core platform, redundant infrastructure and all customer instances, including dedicated deployments, have been updated and verified. ChangeTower remained fully available throughout, with no interruption to monitoring, alerts or the application. We have been monitoring our systems closely for intrusion attempts throughout the day and have found no indication of any unauthorized access or compromise. This was a global security event affecting a substantial share of the internet, and it was addressed within hours of the official patch becoming available. The security of our platform and your data is foundational to what we do, and we treat every event of this kind with the seriousness it deserves. Thank you for your patience and your continued trust in ChangeTower.