Security Watchtower
Advisories and incident analysis.
Page 11 of 61
Active Exploitation Alert
Active Exploitation Alert: Arista VeloCloud Orchestrator CVE-2026-16812 Command Injection Vulnerability Enables Remote Compromise
Active Exploitation Alert
Cl0p Ransomware Actively Exploiting Critical Unauthenticated RCE in PTC Windchill and FlexPLM Systems
Active Exploitation Alert
Active Exploitation Alert: Unpatched Fastjson 1.x RCE Vulnerability Threatens Spring Boot Fat-JAR Applications
Cybersecurity Incident Analysis
Suno Data Breach Analysis: 55.3 Million User Accounts Exposed in Major AI Music Platform Cybersecurity Incident
Cybersecurity Incident Analysis
Stadler Rail Data-Exchange Platform Breach: Cybersecurity Incident Analysis of Everest Ransomware Attack and $12.3M Ransom Demand
Cybersecurity Incident Analysis
South Korea Korea National Diplomatic Academy Data Breach Exposes Diplomat Information via Zero-Day Vulnerability
Cybersecurity Incident Analysis
Nichirei Cyberattack Analysis: RansomHouse Extortion Disrupts Japan’s Largest Frozen Food Logistics Network
CVE Analysis Center
Critical Redis Vulnerability CVE-2024-27348 Enables Remote Code Execution via RESTORE Command: Risk Analysis and Mitigation Strategies
Active Exploitation Alert
Active Exploitation Alert: Iranian State-Sponsored Attacks Targeting Siemens, Schneider Electric, and Rockwell Automation ICS Devices in US Critical Infrastructure
Active Exploitation Alert
Active Exploitation Alert: Fake Bahrain Alert App Deploys Advanced Android Surveillance Malware Targeting Gulf Region Users
Active Exploitation Alert
Active Exploitation Alert: Critical Security Vulnerabilities in Vibe-Coded and AI-Generated Applications
Blog posts
The Mirage of Catch-Up
Email Security
Kratos Phishing Kit Dismantled: Microsoft 365 Session Theft and MFA Bypass Operation Analysis
Cybersecurity Incident Analysis
Coca-Cola’s Fairlife US Production Disrupted by Ransomware Attack: Incident Analysis and Sector Impact 2026
Cybersecurity Incident Analysis
Ostium DeFi Platform Breach: $23.75 Million Stolen in Off-Chain Oracle Attack and Credential Compromise
Cybersecurity Incident Analysis
Estée Lauder Data Breach Analysis: Oracle E-Business Suite CVE-2025-61882 Exploitation by Clop Ransomware
Active Exploitation Alert
Active Exploitation Alert: FakeGit Campaign Abuses 7,600 GitHub Repositories to Distribute SmartLoader and Lumma Stealer Malware via Open-Source Supply Chain
Cybersecurity Incident Analysis
Romania ANCPI Land Registry Wiped in Credential-Based Cyberattack: Incident Analysis and Mitigation Recommendations
Cybersecurity Incident Analysis
AI-Driven Cyberattack Compromises Hugging Face Production Infrastructure via Autonomous Agent: Incident Analysis and Mitigation
CVE Analysis Center
CVE-2026-14266: Critical 7-Zip XZ Archive Decoder Vulnerability Enables Remote Code Execution (Patch in 26.02)
Active Exploitation Alert
Active Exploitation Alert: WP2Shell Critical WordPress Core Vulnerabilities (CVE-2026-63030 & CVE-2026-60137) Enable Unauthenticated RCE in the Wild
Active Exploitation Alert
Active Exploitation Alert: Critical NGINX Vulnerabilities (CVE-2026-42533, CVE-2026-42945) Enable Remote Code Execution and Worker Crashes
Active Exploitation Alert
Active Exploitation Alert: Critical CVE-2026-6875 Remote Code Execution Vulnerability in ServiceNow AI Platform
Cybersecurity Incident Analysis