BlogIncident databaseEventsAbout

Dispatches

Notes from the court.

Field notes on continuity, resilience and what actually keeps a business trading when its systems don’t.

CVE-2026-87936: critical, unauthenticated SQL injection in Drupal's amazee.ai Private AI Provider, showing the exploit request GET /search?field_price=0)) UNION SELECT api_key, name FROM key_config --
Matan KotickWritten by Matan Kotick8 min read

CVE-2026-87936: SQL Injection in Drupal's amazee.ai AI Provider

A single unquoted concatenation in the amazee.ai Private AI Provider's Postgres/pgvector backend turns an ordinary exposed Views filter into unauthenticated SQL injection. Here is the full flow, from a URL parameter to a stolen API key, and the one-line fix.

Open the dispatch
The Namecheap logo mark melting and dripping, illustrating the Phoenix data center meltdown.
Written by Jestr13 min read

The Namecheap Meltdown

Cooling failed in Phoenix, Namecheap powered down 5,000+ servers to save them, and a day of the internet went with it. What actually happened, where the story kept changing, and what the CEO got right and wrong about your email.

Open the dispatch
Written by Jestr7 min read

Operational Resilience For AI

AI agents now run IT, customer support, and financial workflows. Treat them like any other dependency - run a BIA, write a BCP, and practice the outage before it happens.

Open the dispatch

Want to learn more?

Bring Jestr to your court.

We’re onboarding a small group of partners. Request access, or explore the incident database while you wait.

Request accessExplore the incident database