Security Watchtower
Advisories and incident analysis.
Page 1 of 61
Blog posts
Risk-based TPRM isn’t a lighter questionnaire. It’s how vendor reviews stop blocking the business
CVE Analysis Center
TeamViewer CVE-2026-111585: A Malicious Host Can Run Code on the Viewer. Update to 15.83
CVE Analysis Center
WordPress Core 7.1.4 Fixes an Unauthenticated Upgrade-Window Race RCE (CVE-2026-119977). Update and Block wp-content/upgrade/
CVE Analysis Center
PwnEscape CVE-2026-99999: Linux Kernel Guest-to-Host Escape, Patch VM Hosts Now
CVE Analysis Center
Drupal Commerce Core CVE-2026-118539 Access Bypass Actively Exploited: Patch to 3.3.13 / 8.x-2.41 and Audit Orders
CVE Analysis Center
Trojanized Claude Code 2.1.312 and 2.1.313 in Cursor Marketplace Plants SSH Backdoor
CVE Analysis Center
Cisco Secure Firewall ASA and FTD CVE-2026-76418: Exploited SSL VPN DoS Flaw Added to CISA KEV
CVE Analysis Center
Linux Kernel Fragnesia CVE-2026-46300 in CISA KEV: Local Root Flaw Chained With PHP2Shell
CVE Analysis Center
Progress WS_FTP Server CVE-2026-84295 and CVE-2026-90868: Critical Flaws Fixed in 2024.0.7 and 2025.0.4
CVE Analysis Center
Linux Kernel CVE-2026-98432: Critical TCP Use-After-Free, No RHEL or Ubuntu Fix Yet
CVE Analysis Center
VMware ESX CVE-2026-41709: Low-Rated Logging Flaw Now in CISA KEV After Zero-Day Use
CVE Analysis Center
FreeSWITCH CVE-2026-116779: Critical SIP MESSAGE Flaw Exploited in the Wild, Fixed in 1.11.3
CVE Analysis Center
EDK II UEFI PXE Flaw CVE-2026-97631: Critical Pre-Boot Code Execution Risk, Patch Not Yet Released
CVE Analysis Center
Apple CoreGraphics Zero-Day CVE-2026-86950: Fix Now Backported to Older iPhones and iPads
CVE Analysis Center
Adobe Commerce and Magento CVE-2026-48356 (PolyShell) Added to CISA KEV: Apply APSB26-73 and Check for Planted Files
Active Exploitation Alert
Active Exploitation Alert: Discover-Tech Ad Tech Surveillance Campaign Targeting SpaceX Starlink Users via RTB Exploit
CVE Analysis Center
Supermicro BMC/IPMI Firmware Flaws (CVE-2026-18450 Critical): Patch Now for Hosting and Colocation Fleets (October 2026)
Cybersecurity Incident Analysis
DreamHost Resets Some Email and FTP/SFTP Passwords as a Precaution During Ongoing Incident (October 2026)
Cybersecurity Incident Analysis
Genesys Discloses Breach of Internal LMS and CRM Systems; Genesys Cloud and Engage Not Compromised (October 2026)
CVE Analysis Center
Wasmtime Cranelift Sandbox Escapes CVE-2026-115889 and CVE-2026-115893: Update to 36.0.19, 48.0.7, 49.0.4 or 50.0.0
CVE Analysis Center
Apache Traffic Server Fixes 15 Vulnerabilities, Including CVE-2026-111813 in an Experimental Plugin: Upgrade to 9.2.16, 10.1.5 or 10.2.1
Cybersecurity Incident Analysis
Digital Arts Cloud Breach: Stolen Operating Credentials Opened i-FILTER@Cloud, m-FILTER@Cloud and Four More Services, With Traces Back to July 2025
Cybersecurity Incident Analysis
Partner MMS Domain Takeover Exposes Thousands of Private Messages in Major Cybersecurity Incident
Cybersecurity Incident Analysis