DebugBear confirms service has been restored following a DNS hijacking incident

On November 9, 2026, DebugBear, a website speed and Core Web Vitals monitoring tool, confirmed that its service had been fully restored following a security incident involving DNS hijacking and the injection of malicious JavaScript into its monitoring script. Before the incident, DebugBear had advised customers to remove the monitoring script to mitigate the related risks.

The incident drew attention to the fact that monitoring scripts typically need to be embedded on customer websites. If a third-party script is maliciously modified, the risk may extend beyond the tool provider’s service to the websites using the script. The restoration of service indicates that the tool is operational again, but the impact on specific websites still needs to be assessed based on how each site used it.

For businesses expanding overseas and website developers using DebugBear, the next steps are to follow the provider’s incident updates and customer guidance, and to check whether their websites use the relevant script and what actions have already been taken. They should also watch for further information from the provider about the scope of impact and security remediation.

The incident also highlights that website operators should include script security in their reviews when adopting third-party SaaS monitoring tools and establish clear procedures for disabling and restoring them in the event of a security incident.