Security Watchtower
Advisories and incident analysis.
Page 3 of 61
Cybersecurity Incident Analysis
LiteLLM PyPI Compromise (March 2026): A Retrospective
Cybersecurity Incident Analysis
Capcom ID Data Breach Exposes 11.7 Million User Accounts: Incident Analysis and Security Impact
Cybersecurity Incident Analysis
Bullhorn Cyber Incident and Outage: Data Theft Unconfirmed, and a SaaS Concentration Lesson for Staffing Firms
Cybersecurity Incident Analysis
UpdraftCentral Incident: Stolen Connection Keys Used to Backdoor WordPress Sites. Update UpdraftPlus and Delete Old Keys
Cybersecurity Incident Analysis
Developer Platform Security Incidents: Railway, Zeabur and TiDB Cloud (October 2026)
Cybersecurity Incident Analysis
OVHcloud CLI and AOMEI Backupper: When Vendor Release Channels Served Malware, and How to Check Your Builds
Cybersecurity Incident Analysis
ETS and Paradigm Breaches: Two California Government Contractors, Two Separate Data Incidents
CVE Analysis Center
Siemens Software Center CVE-2026-110936: Exploited DLL Side-Loading Flaw Added to CISA KEV. Update to 4.0.9.8
CVE Analysis Center
GitLab CVE-2026-110264: Critical Unauthenticated RCE in Self-Managed GitLab CE/EE. Upgrade to the Fixed Versions Now
Cybersecurity Incident Analysis
LiteLLM 1.107.0 Supply-Chain Compromise: Credential-Stealing Release Hit PyPI and Docker. Isolate, Rebuild and Rotate Now
CVE Analysis Center
Two Critical PHP Vulnerabilities Added to CISA KEV, Fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35: Patch and Restart Now
CVE Analysis Center
eMudhra CA Key Compromise: Chrome and Firefox Have Blocked It, Non-Browser Clients Need Updates Now
CVE Analysis Center
Oracle E-Business Suite CVE-2026-101767: Critical (CVSS 9.8) Unauthenticated Flaw, Apply the October 2026 CPU Now
CVE Analysis Center
SiteGuard Server Edition Flaw CVE-2026-106931 Is Actively Exploited: Save Evidence, Then Patch
Service Disruption Analysis
Revolut Service Disruption Analysis: Cloud Outage Impact, Security Risks, and Supply Chain Dependencies in Google Cloud
Cybersecurity Incident Analysis
Nikkei Inc. Cloud Data Breach Analysis: Credential Compromise Exposes 1.83 Million Records in October 2026
Cybersecurity Incident Analysis
Ahold Delhaize Cybersecurity Incident Analysis: 2026 Attack on IT Infrastructure Impacting Online Services
Active Exploitation Alert
Active Exploitation Alert: Plex Media Server Plex2Shell Vulnerabilities Enable Unauthenticated RCE, Crypto Mining, and Proxy Backdoor Deployment
Cybersecurity Incident Analysis
OpenCode Console Breach Exposes OpenAI, Anthropic, and Google API Keys in Credential Theft and Distillation Attack (October 2026)
Blog posts
Japan's NCO advisory puts vendor management on the leadership agenda. Here's how to keep up with it.
Cybersecurity Incident Analysis
Eurofiber France Waza Platform Data Breach 2026: IBAN and Business Email Exposure Risk Analysis
Active Exploitation Alert
Active Exploitation Alert: Unpatched Broadcom Wi-Fi WPSplinter Vulnerability Enables Remote Root Code Execution on Millions of Routers
Cybersecurity Incident Analysis
ConnectWise Credential Compromise Enables Unauthorized Access to 173 Microsoft 365 Tenants: Cybersecurity Incident Analysis
Cybersecurity Incident Analysis