Security Watchtower
Advisories and incident analysis.
Page 21 of 61
Technology
OpenAI GPT-5.4-Cyber: Advanced AI for Security Teams – Features, Risks, and Third-Party Risk Management
Technology
Microsoft’s $10B Japan AI Initiative: Enhancing Azure Cloud Infrastructure, Cybersecurity, and Local Talent Development (2026–2029)
CVE Analysis Center
Microsoft Patch Tuesday April 2026: Critical Vulnerabilities, RDP and Secure Boot Zero-Days Impacting Windows Systems
Cybersecurity Incident Analysis
McGraw-Hill Salesforce Data Breach 2026: Analysis of ShinyHunters Extortion and Cloud Misconfiguration Risks
Technology
Google Integrates Rust-Based DNS Parser into Pixel 10 Modem Firmware to Strengthen Mobile Security
Cybersecurity Incident Analysis
CPUID Supply Chain Attack: STX RAT Malware Distributed via Trojanized CPU-Z and HWMonitor Downloads
Active Exploitation Alert
Adobe Acrobat and Reader CVE-2026-34621: Critical Prototype Pollution Vulnerability Actively Exploited, Urgent Patch Released
Cybersecurity Incident Analysis
Rockwell Automation/Allen-Bradley PLCs: Nearly 4,000 US Industrial Devices Exposed to Iranian Cyberattacks in 2026
Cybersecurity Incident Analysis
Hims & Hers Zendesk Data Breach 2026: Okta SSO Compromise Exposes Sensitive Customer Support Information
CVE Analysis Center
Google Chrome 147 Security Update: Patches 60 Vulnerabilities Including Critical WebML Remote Code Execution Flaws (CVE-2026-5858, CVE-2026-5859)
CVE Analysis Center
Critical Orthanc DICOM Server Vulnerabilities Expose Healthcare Systems to Crashes and Remote Code Execution (RCE)
CVE Analysis Center
Critical Marimo Python Notebook RCE Vulnerability (CVE-2026-39987) Exploited Within 10 Hours of Disclosure
Cybersecurity Incident Analysis
CPUID Website Compromised: Malware Delivered via CPU-Z and HWMonitor Download Links in April 2026
General News
For retailers: Suppliers of POS, OMS and CRM systems are not ‘Third Party’, they are actually ‘Teammates’
Active Exploitation Alert
Warlock Ransomware Exploits Unpatched Microsoft SharePoint and SmarterMail Servers: Tactics, Analysis, and Mitigation Guidance
CVE Analysis Center
Outpost24 C-Suite Spearphishing Incident: Analysis of 7-Stage Social Engineering Attack in March 2026
Active Exploitation Alert
LeakNet Ransomware Exploits ClickFix via Compromised Websites to Attack Windows Environments with Deno In-Memory Loader
Active Exploitation Alert
Konni Targets KakaoTalk Desktop with EndRAT: Multi-Stage Phishing Attack Exploits Social Messaging for Malware Propagation
Active Exploitation Alert
Intuitive Surgical Administrative Network Breach: 2026 Phishing Attack Exposes Employee and Customer Data
Active Exploitation Alert
GlassWorm ForceMemo Campaign: Supply Chain Attack Targets GitHub Python Repositories with Stolen Tokens and Blockchain-Based Malware
Active Exploitation Alert
EU Sanctions on Chinese and Iranian Firms: Raptor Train Botnet, SMS Service, and Olympic Billboard Cyberattacks Targeting European Critical Infrastructure
Active Exploitation Alert
CVE-2026-32746: Critical Unpatched Vulnerability in GNU InetUtils telnetd Enables Unauthenticated Remote Root Code Execution via Port 23
Active Exploitation Alert
Critical AI Vulnerabilities in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and Remote Code Execution
Active Exploitation Alert