Security Watchtower
Advisories and incident analysis.
Page 2 of 61
CVE Analysis Center
Critical Command Execution Vulnerability in Okta Access Gateway Admin Console (CVE-2026-115547) – Impact, Exploitation, and Mitigation Guide
Cybersecurity Incident Analysis
Blastmail Breach: Rakus Light Cloud Confirms Customer Records and Some Newsletter Mailing Lists Taken
CVE Analysis Center
Ruby Fixes the Onigmo Regexp Bugs Behind GitLab's Four CVEs: Upgrade to 4.0.9, 3.4.12 or 3.3.13 If Your Apps Compile Untrusted Patterns
CVE Analysis Center
Quest Diagnostics Quanum LSM Incident: System Restored, Patient Data Scope Still Under Investigation
Cybersecurity Incident Analysis
PwC Third-Party Vendor Data Breach: 2026 Everest Cyber Extortion Incident Analysis
Cybersecurity Incident Analysis
ANDST-HD 2026 Data Breach Analysis: Cyberattack Exposes 2.5 Million Customer Records and Business Partner Data
Active Exploitation Alert
Active Exploitation Alert: SaaS Supply Chain Attack Targets Microsoft 365 via ConnectWise and Atera Credential Compromise
CVE Analysis Center
Collabora Online Built-in CODE Server for Nextcloud (CVE-2026-110447): Exploited Flaw Added to CISA KEV, Upgrade or Remove the App
CVE Analysis Center
HPE Aruba Networking AOS-8 and AOS-10 Bulletin HPESBNW05162: CVE-2026-79844 and Seven More Flaws Rated 10.0, Patch Now
Cybersecurity Incident Analysis
GMO Internet Onamae.com Desktop Cloud Breach: Customer Data Taken, Platform Will Not Restart
CVE Analysis Center
Splunk Enterprise Security Hardening Release SVD-2026-1008: CVE-2026-76299 and CVE-2026-76302 Rated 9.9, Upgrade Now
CVE Analysis Center
Cisco Expressway CVE-2026-76466 and Unified Communications Hardening Release: Upgrade to X15.5.20 and 15SU5
CVE Analysis Center
Node2Shell: Node.js Brotli Flaw CVE-2026-111497 Added to CISA KEV, Upgrade to 22.23.4, 24.22.1 or 26.12.1
CVE Analysis Center
Arista VeloCloud Orchestrator CVE-2026-114625: Exploited SQL Injection Lets Any Logged-In User Become Operator
CVE Analysis Center
Fortinet Security Hardening Release: Upgrade FortiOS, FortiManager and FortiAnalyzer Now, Advisories Due 10 November
Cybersecurity Incident Analysis
LiteLLM PyPI Compromise (March 2026): A Retrospective
Cybersecurity Incident Analysis
Capcom ID Data Breach Exposes 11.7 Million User Accounts: Incident Analysis and Security Impact
Cybersecurity Incident Analysis
Bullhorn Cyber Incident and Outage: Data Theft Unconfirmed, and a SaaS Concentration Lesson for Staffing Firms
Cybersecurity Incident Analysis
UpdraftCentral Incident: Stolen Connection Keys Used to Backdoor WordPress Sites. Update UpdraftPlus and Delete Old Keys
Cybersecurity Incident Analysis
Developer Platform Security Incidents: Railway, Zeabur and TiDB Cloud (October 2026)
Cybersecurity Incident Analysis
OVHcloud CLI and AOMEI Backupper: When Vendor Release Channels Served Malware, and How to Check Your Builds
Cybersecurity Incident Analysis
ETS and Paradigm Breaches: Two California Government Contractors, Two Separate Data Incidents
CVE Analysis Center
Siemens Software Center CVE-2026-110936: Exploited DLL Side-Loading Flaw Added to CISA KEV. Update to 4.0.9.8
CVE Analysis Center