Security Watchtower
Advisories and incident analysis.
Page 8 of 61
Cybersecurity Incident Analysis
JetBrains Cadence Breach: Attackers Exploit Unpatched TeamCity CVE-2026-63077 to Exfiltrate AWS Credentials and Source Code
Technology
FalconFlank Zero-Day Exposes Critical Privilege Escalation Vulnerability in CrowdStrike Falcon Sensor for Windows 11 and Windows Server 2026
CVE Analysis Center
Critical CVE-2026-73749 Remote Code Execution Vulnerability in HPE ArubaOS-CX: Affected Versions, Risks, and Patch Guidance
CVE Analysis Center
Critical CVE-2026-20212 Vulnerability in Cisco Nexus 9000 Series Switches Allows Unauthenticated Remote Code Execution
Active Exploitation Alert
Active Exploitation Alert: North Korean APTs Deploy Ted Backdoor in Compromised HAProxy Builds to Hijack Web Traffic
Active Exploitation Alert
Active Exploitation Alert: SonicWall SMA 1000 Zero-Day Vulnerabilities (CVE-2024-1709 & CVE-2024-1708) Chained for Full Appliance Compromise
Cybersecurity Incident Analysis
McKesson Okta and Cloud Services Breach Analysis: ShinyHunters Vishing Attack Leads to Major Healthcare Data Exfiltration
Cybersecurity Incident Analysis
Hasbro Corporate Network Breach Exposes Employee Personal and Financial Data in 2026 – Cybersecurity Incident Analysis
CVE Analysis Center
Critical CVE-2026-18431 Zero-Click RCE Vulnerability in Avada WordPress Theme and Fusion Builder Plugin – Analysis and Mitigation Guide
Active Exploitation Alert
Critical Active Exploitation Alert: Unitree G1 EDU Humanoid Robot Vulnerabilities (CVE-2026-76639, CVE-2026-76640) Enable Root RCE via Bluetooth and Chatbot Flaws
Active Exploitation Alert
Cosmos EVM Vulnerability Exploited: Critical Flaw Leads to Multi-Chain Blockchain Attacks and $5.7M Losses
Cybersecurity Incident Analysis
ATF Cybersecurity Incident Analysis: Ransomware Group Qilin Claims Attack on Standalone Investigation System
Active Exploitation Alert
APT28’s HOOKEDGE Backdoor Exploiting Microsoft Word Macros to Target European Government and Diplomatic Organizations
CVE Analysis Center
Critical Unpatched Vulnerabilities in Kaltura mwEmbed Expose Organizations to Remote Code Execution and File Read Attacks (CVE-2026-19912, CVE-2026-19913)
Active Exploitation Alert
Weedhack Malware Actively Exploiting Minecraft Modding Community via SEO Poisoning and Fake Client Downloads
CVE Analysis Center
CVE-2026-18963 Analysis: Critical Keycloak Password Reset Vulnerability Allows Unauthenticated Account Takeover
Active Exploitation Alert
Active Exploitation Alert: WordlistLoader Bypasses Security Defenses to Deliver Amatera Stealer Malware on Windows Systems
Technology
ToxicPanda Android Malware Exploits VPN Permissions to Block Google Play and Play Protect: Security Risks and Mitigation Strategies
Active Exploitation Alert
Active Exploitation Alert: Critical Supply Chain Attack via 14 Trojanized npm Packages Drops RedC2 4.0 AI-Assisted Linux Backdoor
Active Exploitation Alert
Active Exploitation Alert: Critical GitLab CVE-2026-19478 Code Injection Vulnerability Targets Unpatched Instances
Technology
CDN Tsunami: Critical HTTP/3 to HTTP/1.1 Protocol Translation Vulnerability Triggers Up to 350x DoS Amplification Across Major CDN Providers
Active Exploitation Alert
Active Exploitation of MLflow SSRF Vulnerability (CVE-2026-64849) Enables Cloud Credential Theft and Account Compromise
Active Exploitation Alert
Active Exploitation Alert: ToxicPanda 2.0 and GoldDigger Banking Malware Escalate On-Device Fraud Against Android Users Globally
Cybersecurity Incident Analysis