About the downtime and security incident
Summary
Danbooru suffered a security incident on November 4 that forced a weeklong downtime while defenders fixed the breach. The attacker uploaded a malicious Flash post with an XSS worm that harvested IPs and briefly hijacked accounts to spread itself; investigators noted the attacker used LLMs to identify exploits. The team then hardened defenses, performed server maintenance, and issued guidance on securing accounts, including enabling 2FA and reviewing login history.