Everything you care about in one place
Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.
Get Feederlabs.watchtowr.com
watchTowr Labs - Blog
Get the latest updates from watchTowr Labs - Blog directly as they happen.
Follow now 102 followers
Latest posts
Last updated about 1 month ago
The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)
about 1 month ago
Sina Kheirkhah (@SinSinology) Hello! Yes, it's all a disaster again! Let's get...
You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)
2 months ago
Sonny If you squint and look at the CISA KEV list, you...
Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2)
2 months ago
Today, we woke up with a nagging feeling: what if Citrix had...
The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)
2 months ago
Aliz Hammond Sequels? Pain? We're obviously talking about Citrix NetScalers, yet again.Welcome...
A 32-Year-Old Bug Walks Into A Telnet Server (GNU inetutils Telnetd CVE-2026-32746)
2 months ago
McCaulay Hudson A long, long time ago, in a land free of...
The Most Organized Threat Actors Use Your ITSM (BMC FootPrints Pre-Auth Remote Code Execution Chains)
3 months ago
Sonny SolarWinds. Ivanti. SysAid. ManageEngine. Giants of the KEV world, all of...
Sometimes, You Can Just Feel The Security In The Design (Junos OS Evolved CVE-2026-21902 RCE)
3 months ago
McCaulay Hudson On today’s ‘good news disguised as other things’ segment, we’re...
Buy A Help Desk, Bundle A Remote Access Solution? (SolarWinds Web Help Desk Pre-Auth RCE Chain(s))
3 months ago
It’s been a while, but we’re back - in time for story...
Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340)
4 months ago
When Ivanti removed the embargoes from CVE-2026-1281 and CVE-2026-1340 - pre-auth Remote...
Attackers With Decompilers Strike Again (SmarterTools SmarterMail WT-2026-0001 Auth Bypass)
4 months ago
Well, well, well - look what we’re back with.You may recall that...
Do Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691)
5 months ago
Welcome to 2026!While we are all waiting for the scheduled SSLVPN ITW...
SOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies And WSDL
6 months ago
Welcome back! As we near the end of 2025, we are, of...