Category
security
Incident debrief: Mender email invitations abused for spam emails
On Oct 23rd 2026, from 13:45 to 15:01 UTC, our hosted Mender production instance was abused to send spam emails. It took us 1 hour and 16 minutes to detect the problem, disable email sending, find the offending user and suspend them to stop the abuse.