Security Watchtower
Advisories and incident analysis.
Page 6 of 61
Cybersecurity Incident Analysis
Ransomware Attacks in Japan H1 2026: Analysis of The Gentlemen RaaS, Qilin AI-Generated Tools, and GLPI Vulnerabilities
Active Exploitation Alert
Microsoft SharePoint Server CVE-2026-65660 Actively Exploited: Critical RCE Vulnerability Threatens Unpatched Systems
Service Disruption Analysis
Kiteworks Precautionary Shutdown Advisory: Zero-Day Threat Prompts 9-Hour Service Disruption Across All Deployment Models
CVE Analysis Center
Active Exploitation Alert: F5 BIG-IP APM CVE-2026-94127 Added to CISA KEV (OAuth Authorization Server RCE)
CVE Analysis Center
Critical JWT Authentication Vulnerability in Microsoft Titan Analytics Exposed 17 Trillion Internal Records (CVE Analysis – September 2026)
Cybersecurity Incident Analysis
Autonomous OpenAI Agents Breach U.S. Government Websites: 2026 Cybersecurity Incident Analysis
Cybersecurity Incident Analysis
AI-Driven Cyberattack Targets Adif and Renfe: 500GB Data Exfiltrated from Spanish Railway Infrastructure
Active Exploitation Alert
Active Exploitation of Citrix NetScaler ADC and Gateway Zero-Day Vulnerabilities (CVE-2026-88771, CVE-2026-88772) – Urgent Patch Required
Active Exploitation Alert
Active Exploitation Alert: Compromised GitHub Actions Reactivated, Resuming Mini Shai-Hulud Malware Supply Chain Attacks in CI/CD Workflows
CVE Analysis Center
Active Exploitation Alert: MikroTik RouterOS “MikroTrick” — CVE-2026-67277 / CVE-2026-86060 Added to CISA KEV
CVE Analysis Center
Active Exploitation Alert: Check Point Security Gateway & Management Server — CVE-2026-85102 / CVE-2026-93616 Added to CISA KEV
Service Disruption Analysis
Radaris.com and Related Data Broker Domains Seized After New Jersey Privacy Law Enforcement
Cybersecurity Incident Analysis
Miljödata Work Environment & HR Systems Breach: DataCarry Ransomware Attack Exposes 2.2 Million Records, Results in $183,000 Fine
Cybersecurity Incident Analysis
FBI Data Breach Analysis: ShinyHunters Exploit Oracle PeopleSoft Zero-Day to Exfiltrate Employee and Applicant Data
Cybersecurity Incident Analysis
CrowdSec GitHub Data Breach: TanStack Supply Chain Attack and Offboarding Failure Analysis
Active Exploitation Alert
Chinese APTs Exploit Chrome and Windows Zero-Day Chain to Deploy CLEANGULP Malware Targeting Governments and NGOs
Technology
BigDiskBuster Zero-Day: Unpatched Vulnerability Lets Attackers Block Microsoft Defender Updates on All Windows Versions
CVE Analysis Center
Active Exploitation Alert: Arista VeloCloud Orchestrator Unauthenticated Privileged Access (CVE-2026-93952) Added to CISA KEV — CVSS 10.0 Control-Plane Risk to Managed Edges
Active Exploitation Alert
Active Exploitation Alert: Critical WordPress Core and Bricks Builder Vulnerabilities Enable Unauthenticated Remote Code Execution (RCE)
CVE Analysis Center
Active Exploitation Alert: Brevo (Sendinblue) CDN Supply-Chain Compromise — ClickFix Injection via Stolen Cloudflare API Key (~100k Customer Sites)
CVE Analysis Center
Active Exploitation Alert: ConnectWise ScreenConnect Improper Privilege Management / Missing Authorization (CVE-2026-84869) Added to CISA KEV — Unauthorized File Transfer and Execution via Active Remote Session
CVE Analysis Center
Active Exploitation Alert: Cisco Identity Services Engine Authentication Bypass (CVE-2026-76460) Added to CISA KEV — Unauthenticated API Bypass to Root on ISE
Cybersecurity Incident Analysis
Shai-Hulud Worm Attack: AI Coding Assistant Session Hijack Exposes SaaS Code Repositories to Supply Chain Compromise
CVE Analysis Center