Update - Creatia and our bare metal management portal are back online and have been operating normally for the past few hours. Your network services and DDoS protection have continued to operate normally throughout.

Our quick action in isolating all systems running PHP or Node.js, which also had several serious vulnerabilities disclosed today including a remote code execution flaw, has kept our environment secure. No indicators of compromise have been detected. Your services remain secure and unaffected.

Our billing portal remains offline until patched PHP versions are released for our hosting platform, which is expected within the next few hours. We have chosen not to apply workarounds or rely on a WAF to bring it back sooner, as we believe this is the right choice given the risks involved.

Current status:
Creatia: Online
Bare Metal Management: Online
Billing: Offline until patched PHP versions are available

Support can still be accessed by emailing support@globalsecurelayer.com. Emails continue to be triaged as normal through our ticketing system, which has not been affected.

Oct 21, 2026 - 20:03 UTC
Update - Your network services and DDoS protection continue to operate normally. Existing mitigation rules, filters and routing remain in place and are enforced as configured.

Creatia and our other portals run on PHP, and until the fix is available and applied we have chosen to take the portals offline rather than leave it exposed as a precautionary measure.

What PHP has announced:
A security release is scheduled for Wednesday, 21 October 2026 at 14:00 UTC (Thursday, October 22 at 1:00 AM GMT+11 local time).
It addresses two critical vulnerabilities, both rated CVSS v4.0 9.2.
Full details, affected versions and fixed versions will only be published when the release is made.
PHP may release earlier if details of either vulnerability become public, or if active exploitation is seen in the wild.

Support can still be accessed by emailing support@globalsecurelayer.com

Oct 21, 2026 - 09:55 UTC
Monitoring - The PHP project has announced upcoming security patches addressing several potentially high-severity vulnerabilities.

We have completed an assessment of our environment and have found no affected systems. Your services remain secure and unaffected.

As an additional precaution, we are temporarily taking PHP based systems offline until the patches are released and applied. We expect this to be completed within 24 hours.

Oct 21, 2026 - 01:00 UTC
Update - SUBCO has advised Indigo West's repair has been rescheduled to October 25th - November 3rd.
Oct 07, 2026 - 08:12 UTC
Update - Repairs on Indigo West are scheduled for between the 16-26th of October. ASC is scheduled shortly after on the 4th of November.

GSL will continue to route traffic on the best alternative paths to Singapore.

Please note these timelines are subject to weather conditions, permits and condition of cables.

Oct 07, 2026 - 04:54 UTC
Identified - We observed short flaps occurring on the ASC submarine cable system at 04/09/2026 03:50:33 UTC. However a hard down event followed at 04/09/2026 06:19:12 UTC

Due to the Indigo West cable system also being offline for shunt fault repairs, traffic will take a longer path which will result in higher latency between Australia and Singapore.

We are waiting for further information from Vocus regarding this outage. Information received will be shared via our status page.

Sep 04, 2026 - 06:49 UTC
IP Transit Operational
(AU) Adelaide Operational
(AU) Brisbane Operational
(AU) Melbourne Operational
(AU) Sydney Operational
(AU) Perth Operational
(NZ) Auckland Operational
(EU) Amsterdam Operational
(EU) Marseille Operational
(EU) Frankfurt Operational
(UK) London Operational
(HK) Hong Kong Operational
(SG) Singapore Operational
(JP) Tokyo Operational
(USA) Ashburn Operational
(USA) Chicago Operational
(USA) Dallas Operational
(USA) Phoenix Operational
(USA) Los Angeles Operational
(USA) New York Operational
(USA) Atlanta Operational
(USA) Seattle Operational
(USA) Guam Operational
(EU) Sofia Operational
(EU) Helsinki Operational
(EU) Madrid Operational
(EU) Warsaw Operational
(EU) Vienna Operational
(EU) Milan Operational
Backbone Network Major Outage
(AU) Adelaide Operational
(AU) Brisbane Operational
(AU) Melbourne Operational
(AU) Sydney Operational
(AU) Perth Major Outage
(NZ) Auckland Operational
(EU) Amsterdam Operational
(EU) Marseille Operational
(EU) Frankfurt Operational
(UK) London Operational
(HK) Hong Kong Operational
(SG) Singapore Major Outage
(JP) Tokyo Operational
(USA) Ashburn Operational
(USA) Chicago Operational
(USA) Dallas Operational
(USA) Phoenix Operational
(USA) Los Angeles Operational
(USA) New York Operational
(USA) Atlanta Operational
(USA) Seattle Operational
(USA) Guam Operational
(EU) Milan Operational
(EU) Sofia Operational
(EU) Helsinki Operational
(EU) Warsaw Operational
(EU) Madrid Operational
(EU) Vienna Operational
(TW) Taipei Operational
Datacentres Operational
(AU) Sydney - Equinix SY5 Operational
(AU) Sydney - NextDC S1 Operational
(AU) Brisbane - NextDC B2 Operational
(AU) Melbourne - NextDC M1 Operational
(AU) Adelaide - Equinix AE1 Operational
(AU) Adelaide - ColoCity DC3 Operational
(AU) Perth - Equinix PE2 Operational
(AU) Perth - NextDC P2 Operational
(NZ) Auckland - DataCentre220 Operational
(SG) Singapore - Equinix SG3 Operational
(JPN) Tokyo - Equinix TY8 Operational
(HK) Hong Kong - Equinix HK1 Operational
(USA) Ashburn - Equinix DC10 Operational
(USA) New York - Equinix NY2 Operational
(USA) Chicago - Equinix CH1 Operational
(USA) Los Angeles - Coresite LA2 Operational
(USA) Dallas - Equinix DA11 Operational
(EU) Amsterdam - Equinix AM5 Operational
(EU) Amsterdam - Nikhef Operational
(EU) Frankfurt - Equinix FR5 Operational
(EU) Marseille - Interxion MRS2/3 Operational
(EU) Amsterdam - Iron Mountain AMS1 Operational
(USA) Phoenix - PhoenixNAP Operational
(UK) London - Equinix LD8 Operational
(UK) London - Telehouse North Operational
(UK) London - Telehouse West Operational
(USA) Los Angeles - Equinix LA1 Operational
(USA) Chicago - Equinix CH3 Operational
(USA) Atlanta - Digital Realty 56 Marietta Operational
(USA) Seattle - Digital Realty The Westin Building Exchange Operational
(USA) Guam - RTI Guam GNC Operational
(AU) Melbourne - Equinix ME1 Operational
(AU) Perth - NextDC P1 Operational
Customer Portals Under Maintenance
Support and Billing Under Maintenance
Bare Metal Management Operational
Protection Reporting Operational
Protection Managment (Creatia) Operational
Remote Protection Management (Mercury) Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance

Oct 21, 2026

Unresolved incident: Customer Portal Patching.

Oct 20, 2026

No incidents reported.

Oct 19, 2026

No incidents reported.

Oct 18, 2026

Resolved - This incident has been resolved.
Oct 18, 22:10 UTC
Update - We are continuing to monitor for any further issues.
Oct 18, 22:08 UTC
Update - We have also observed restoration of two more cables in the past 15 minutes:
Unity - Tokyo > Los Angeles
FLAG NAL - Tokyo > Korea

4 cables still remain offline in the APAC region.

Oct 7, 05:08 UTC
Update - We have observed recovery of the Asia Direct Cable (ADC) between Singapore and Japan.

Works are ongoing in Japan to repair terrestrial segments impacting US and Intra-Asia links which were impacted by Typhoon Dujuan.

We continue to monitor the situation and move traffic where possible.

Oct 7, 04:42 UTC
Monitoring - Multiple subsea cable systems in the Asia-Pacific region are currently out of service due to cuts and maintenance. Affected traffic has been rerouted over alternative paths, some customers may see increased latency on routes to, from, or through APAC.

Our engineering team is monitoring network performance and optimizing traffic paths where capacity allows. Full restoration depends on the third-party cable operators completing repairs, and we will share updates as those timelines become clearer.

Oct 2, 11:21 UTC

Oct 17, 2026

No incidents reported.

Oct 16, 2026

No incidents reported.

Oct 15, 2026

No incidents reported.

Oct 14, 2026

No incidents reported.

Oct 13, 2026

No incidents reported.

Oct 12, 2026

No incidents reported.

Oct 11, 2026

No incidents reported.

Oct 10, 2026

No incidents reported.

Oct 9, 2026

No incidents reported.

Oct 8, 2026

No incidents reported.

Oct 7, 2026

Unresolved incident: ASC and Indigo Submarine Cables Offline: Perth - Singapore.