News

Oracle Cloud went down in global outage

A few hours ago reports of Oracle Cloud services going down surfaced on the internet.

The outage that appears to have lasted about two hours, impacted a large number of Oracle sites across the world.

DownDetector shows reports of Oracle Cloud outage peaking as of a few hours ago

This incident affected: Network Infrastructure (South Korea North (Chuncheon), India South (Hyderabad), Australia Southeast (Melbourne), India West (Mumbai), Japan Central (Osaka), South Korea Central (Seoul), Japan East (Tokyo), Australia East (Sydney), Canada Southeast (Montreal), Canada Southeast (Toronto), Netherlands Northwest (Amsterdam), Germany Central (Frankfurt), Switzerland North (Zurich), UAE East (Dubai), Saudi Arabia West (Jeddah), Chile Central (Santiago), Brazil East (Sao Paulo), UK West (Cardiff), UK South (London), US East (Ashburn), US West (Phoenix), US West (San Jose)) and Console (South Korea North (Chuncheon), India South (Hyderabad), Australia Southeast (Melbourne), ap-mumbai-1, Japan Central (Osaka), ap-seoul-1, Australia East (Sydney), ap-tokyo-1, Canada Southeast (Montreal), ca-toronto-1 region, Netherlands Northwest (Amsterdam), eu-frankfurt-1 region, eu-zurich-1 region, UAE East (Dubai), Saudi Arabia West (Jeddah), Chile Central (Santiago), sa-saopaulo-1, UK West (Cardiff), uk-london-1 region, us-ashburn-1 region, us-phoenix-1 region, US West (San Jose)),” reads oracle’s status page.

Experts have concluded this issue to be related to Oracle’s dynamic DNS provider, DynDNS.

Some users in a thread further discussed the root cause of the issue being DNS-related.

Image source: YCombinator Hacker News

“DNS is a mission-critical service for every organization. But as with any technology, it is susceptible to configuration and software errors or equipment failures that cause outages. When DNS fails, websites, applications, and online services become unavailable, bringing operations, revenue, and brand reputation down with it. In many cases, the monetary loss can be substantial.”

“Companies that rely on digital apps and services should implement the following best practices to minimize the risk of downtime and ensure resiliency,” Kris Beevers, co-founder, and CEO of NS1 told Security Report.

The tips shared by Beevers that digital companies can leverage include:

  1. Build-in redundancy at the DNS layer: Deploy a secondary, always-on DNS network that does not share the same infrastructure (servers, networks and data centers) as the first. This ensures that if one DNS network falls under duress, that the other will subsume the queries for the pair ensuring that queries don’t go unanswered.
  2. Monitor system performance continuously: Monitoring the health and response times of infrastructure and applications can provide early indications that there are problems and allow IT teams to get in front of these obstacles.
  3. Leverage anycast DNS: A highly-resilient anycast network ensures that DNS requests are dynamically diverted to an available server when there are global connectivity issues.
  4. Automate DNS management processes: Reduce manual errors and improve resiliency by automating DNS management and embedding intelligent decision-making and traffic steering capabilities within networking infrastructure.

As of March 11th, 2021, 01:55 UTC, Oracle stated that the incident is now resolved.

Ax Sharma

Ax Sharma is an Indian-origin British security researcher, journalist and TV subject matter expert with a focus on malware analysis and cybercrime investigations. His areas of interest include open source software security, threat intel analysis, and reverse engineering. Frequently featured by leading media outlets like the BBC, Channel 5, Fortune, WIRED, The Register, among others, Ax is an active community member of the OWASP Foundation and the British Association of Journalists (BAJ).

Recent Posts

Sea Turtle Cyber Espionage Campaign Targets Telecommunication and IT Companies in the Netherlands

Telecommunication, media, internet service providers (ISPs), information technology (IT)-service providers, and Kurdish websites in the…

11 months ago

Rogue WordPress plugin: Threat hunters uncover credit card skimming campaign targeting e-commerce sites

Rogue WordPress Plugin Found to Steal Credit Card Information in Magecart Campaign Threat hunters have…

11 months ago

Albanian Parliament and telco ‘One Albania’ suffer cyber attacks

The Assembly of the Republic of Albania and telecom company One Albania have recently fallen…

11 months ago

Carbanak Banking Malware Resurfaces with Updated Tactics in Ransomware Attacks

The banking malware Carbanak has resurfaced with updated tactics, incorporating attack vendors and techniques to…

11 months ago

Theme park giant Parques Reunidos hit by a ransomware cyber attack

One of the world's largest theme park operators, Parques Reunidos has disclosed a cybersecurity incident.…

2 years ago

Phishing kit screenshots your email domain on the fly to appear real

Phishing kit used by multiple hacked sites generates a log in page on the fly…

2 years ago

This website uses cookies.