On our Discourse instance, the “system” account has started sending spam to the forum and the email list. It has happened three times in the last five days. There is no user responsible for “system,” nobody has logged in to admin with that username, and there are no obvious attack surfaces in the a…

Spam from "system"

Falco (Falco) October 21, 2025, 8:43pm 4

Do you have any active API keys? Check /admin/api/keys

2 Likes