Security Watchtower
Advisories and incident analysis.
Page 20 of 61
CVE Analysis Center
OpenWrt 23.05 Authenticated Remote Code Execution (RCE) Vulnerability: Risk Analysis, Impact, and Mitigation (CVE-2025-62526)
Technology
From patch managemet to outfit management
Active Exploitation Alert
CVE-2026-42208: Critical Pre-Auth SQL Injection in LiteLLM Actively Exploited Within 36 Hours of Disclosure
Active Exploitation Alert
Critical Authenticated Remote Code Execution Vulnerability in JuzaWeb CMS 3.4.2 (CVE-2025-5425) – Exploit in the Wild and Mitigation Guidance
Active Exploitation Alert
BlueNoroff APT Targets Crypto and Web3 Firms with AI Deepfakes and Fake Zoom Malware on macOS
Cybersecurity Incident Analysis
Vercel April 2026 Security Incident: Context.ai-Linked Breach Exposes Non-Sensitive Environment Variables and Customer Accounts
CVE Analysis Center
Pack2TheRoot (CVE-2026-41651): Critical Local Privilege Escalation Vulnerability in PackageKit Grants Root Access on Major Linux Distributions
General News
Locked Shields 2026: 41 Nations Defend Critical Infrastructure in NATO’s Largest Live-Fire Cybersecurity Exercise
Active Exploitation Alert
Firestarter Backdoor Malware Targets Cisco ASA and FTD Firewalls, Survives Updates and Security Patches
Technology
fast16 Malware: Pre-Stuxnet Cyber Sabotage Targeting LS-DYNA, PKPM, and MOHID Engineering Software Uncovered
Active Exploitation Alert
CVE-2026-33626: Critical SSRF Vulnerability in LMDeploy Rapidly Exploited in the Wild — Technical Analysis and Mitigation Guide
Active Exploitation Alert
China-Linked GopherWhisper APT Targets Mongolian Government: Abuse of Slack, Discord, and Microsoft 365 in Advanced Espionage Campaign
Cybersecurity Incident Analysis
ADT Salesforce Data Breach 2026: ShinyHunters Compromise Okta SSO via Vishing Attack
Cybersecurity Incident Analysis
26 FakeWallet Apps Impersonating Crypto Wallets Discovered on Apple App Store: Seed Phrase Theft Campaign Targeting iOS Users (April 2026)
Active Exploitation Alert
Surge in Malware and Phishing Attacks via n8n Webhooks: Analysis of Cloud Workflow Automation Abuse (2025-2026)
Active Exploitation Alert
Over 100 Malicious Chrome Extensions in Chrome Web Store Steal Google and Telegram Data, Create Persistent Backdoors
Cybersecurity Incident Analysis
JanaWare Ransomware: Six-Year Campaign Targeting Turkish Home Users and SMBs with Advanced Geo-Fencing and Evasion Techniques
Active Exploitation Alert
Dragon Boss Solutions Signed Software Abused to Disable Antivirus Protection in Global Malware Campaign
Cybersecurity Incident Analysis
Critical Supply Chain Attack on EssentialPlugin WordPress Suite Exposes Over 400,000 Websites to Malware
Active Exploitation Alert
Critical nginx-ui Vulnerability CVE-2026-33032: Actively Exploited Authentication Bypass Allowing Full Nginx Server Takeover
Active Exploitation Alert
Critical CVE-2024-3273 Authentication Bypass in Nginx UI Actively Exploited – Immediate Patch Required
CVE Analysis Center
April 2026 Patch Tuesday: Critical Vulnerabilities in SAP, Adobe, Microsoft SharePoint, Fortinet, and ColdFusion Threaten Enterprise Security
Cybersecurity Incident Analysis
AgingFly Malware: UAC-0247 Cyberattacks Target Ukrainian Government and Hospitals with Digitally Signed Malware
Technology