Security Watchtower
Advisories and incident analysis.
Page 18 of 61
Active Exploitation Alert
Active Exploitation Alert: Ghost CMS CVE-2026-26980 Mass Attack Hijacks 700+ Sites for ClickFix Malware Campaigns
General News
Infosecurity Europe 2024 Key Findings: AI-Driven Cyber Threats, MFA Bypass, and Supply Chain Vulnerabilities Impacting Microsoft 365, Google Workspace, and Okta
Cybersecurity Incident Analysis
DocketWise Data Breach 2026: Credential Compromise Exposes Sensitive Client Data in Immigration Case Management Platform
Cybersecurity Incident Analysis
Megalodon Supply Chain Attack: TeamPCP Compromises 5,561 GitHub Repositories via Malicious CI/CD Workflows
Cybersecurity Incident Analysis
First VPN Takedown: Operation Saffron Dismantles Criminal VPN Used by 25 Ransomware Groups (2014–2026)
Active Exploitation Alert
Critical Active Exploitation Alert: CVE-2026-48172 in LiteSpeed cPanel Plugin Enables Root Privilege Escalation
Active Exploitation Alert
Active Exploitation Alert: Underminr Vulnerability in Major CDN Providers Enables Attackers to Hide Malicious Traffic Behind Trusted Domains
Active Exploitation Alert
Active Exploitation Alert: Laravel Lang PHP Packages Compromised in Supply Chain Attack to Deploy Credential-Stealing Malware
Cybersecurity Incident Analysis
TanStack npm Supply Chain Attack: Detailed Analysis of the May 2026 GitHub Actions Breach and Multi-Ecosystem Impact
Active Exploitation Alert
Microsoft Defender Zero-Day Vulnerabilities RedSun and UnDefend Actively Exploited on Windows 10, 11, and Server (April 2026 CVE Analysis)
Cybersecurity Incident Analysis
GitHub Internal Repositories Breached via Compromised Nx Console VS Code Extension: 2026 Supply Chain Cybersecurity Incident Analysis
CVE Analysis Center
CVE-2024-55638: Highly Critical Drupal Core Vulnerability Threatens PostgreSQL Sites with Remote Code Execution (RCE)
Technology
AI-Driven Surge in Google Chrome Vulnerabilities: Technical, Supply Chain, and Cyber Risk Analysis – June 2024
CVE Analysis Center
Shai-Hulud Malware Source Code Leak Fuels Major npm Supply Chain Attack: Technical Analysis, Impact, and Mitigation Strategies
CVE Analysis Center
MiniPlasma Zero-Day in Windows Cloud Files Mini Filter Driver Enables SYSTEM Privilege Escalation on Fully Patched Windows 10, 11, and Server 2022/2025
Cybersecurity Incident Analysis
Iranian Cyberattacks Exploit Unsecured Automatic Tank Gauge Systems in US Gas Stations: 2026 Incident Analysis and Mitigation Recommendations
CVE Analysis Center
CVE Analysis Report: Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware Targeting JavaScript Supply Chain
CVE Analysis Center
CVE-2026-8153: Critical OS Command Injection Vulnerability in Universal Robots PolyScope 5 Exposes Industrial Robot Fleets to Remote Hacking
Active Exploitation Alert
CVE-2026-42897 Zero-Day Analysis: Microsoft Exchange Server OWA XSS Vulnerability Exploited in the Wild
CVE Analysis Center
Critical RCE, SQL Injection, and Privilege Escalation Vulnerabilities Affecting Ivanti Endpoint Manager, Fortinet FortiClient EMS (CVE-2026-21643), SAP, VMware, and n8n: CVE Analysis, Exploitation, and Patch Guidance
Active Exploitation Alert
Funnel Builder Plugin Vulnerability Exploited in WooCommerce Checkout Skimming Campaign; Security Patch Available
Active Exploitation Alert
PoC Code Published for Critical NGINX and Ingress-NGINX Vulnerabilities (CVE-2026-42945 & CVE-2025-1974): Remote Code Execution Risk for Web Servers and Kubernetes Clusters
Cybersecurity Incident Analysis
OpenAI macOS Products Impacted by TanStack Supply Chain Attack via Mini Shai-Hulud Malware in TeamPCP Campaign
Cybersecurity Incident Analysis