Rackspace monitoring systems rocked by zero-day

Rackspace discovered and contained an exploitation of a zero-day remote code execution flaw in a third-party utility bundled with ScienceLogic's SL1 monitoring product that was used to access three internal monitoring web servers and obtain limited monitoring/customer information (account names/numbers, usernames, device IDs, device IPs, and AES256-encrypted internal device agent credentials). Rackspace isolated affected systems, worked with ScienceLogic to deploy a patch, rotated internal device agent credentials as a precaution, and reported no broader disruption to other products or services.