Study the deployments, infrastructure faults and engineering decisions behind outages. These episodes explain failure mechanisms, recovery decisions and lessons supported by the incident sources.
At 10:00 on Tuesday, September 8, one routine squawk-code request inside NATS's National Airspace System (NAS) is interrupted by a higher-priority message while it is part-way through updating a value
3:06 ↗
An engineer in Melbourne powers a timing chassis back on at 2:50 a.m., and by breakfast Australia's biggest mobile network agrees that it is November 2006. July 8, 2026: a GPS card in Telstra's NTP ch
3:15 ↗
A policy row with a few blank fields hits a null pointer, and Google Cloud crashes in every region at once — then Cloudflare falls with it. June 12, 2025, 17:49 UTC: Service Control, the binary that a
2:57 ↗
A bot opens a pull request. A human merges it 24 minutes later. 95 minutes after that, a worm has published 110 malicious versions of his 22 npm packages, under his name, with a token it found in his
3:04 ↗
Facebook removes its own address from the internet, and when its engineers arrive to put it back, the badge readers are down too, because they run on Facebook. October 4, 2021, 15:40 UTC: a routine ba
3:01 ↗
A four-macro Rust crate with 260 million downloads adds one dependency, and `cargo build` runs a stranger's binary on your machine. August 20, 2026: arrayref 0.3.10 lands on crates.io depending on pro
3:09 ↗
July 19, 2024, 04:09 UTC: CrowdStrike pushes Channel File 291 — a Rapid Response Content update — to every Windows Falcon sensor online. The template it feeds was declared with 21 input fields in Febr
2:52 ↗
March 22, 2016, 21:30 UTC: a developer unpublishes all 273 of his npm packages after npm hands the package name "kik" to Kik, the messaging app, whose patent agent had promised "lawyers banging on you
2:52 ↗
July 2, 2019, 13:42 UTC: one new rule for Cloudflare's Web Application Firewall goes live in 180+ cities in about two seconds. It is an XSS rule in simulate mode, so it blocks nothing, but it still ru
3:00 ↗
August 1, 2012, 9:30 a.m. ET: Knight Capital, the market maker behind roughly a tenth of all U.S. stock trading, has just deployed new order-routing code to seven of its eight SMARS servers. The eight
2:52 ↗
January 31, 2017, 23:27 UTC: a GitLab engineer, fighting a broken replica at the end of a long night, removes the PostgreSQL data directory on db1 instead of db2. db1 is the primary. About 300 GB of G
2:53 ↗
An AI coding agent (Cursor running Claude Opus 4.6) hits a credential mismatch in staging and "fixes" it by calling volumeDelete on Railway with an account-scoped token it found in an unrelated file.
3:23 ↗