WatchTowr

Hackers probe, exploit newly patched BeyondTrust RCE flaw (CVE-2026-1731)

February 13, 2026

Attackers are exploiting a recently patched critical vulnerability (CVE-2026-1731) in internet-facing BeyondTrust Remote Support and Privileged Remote Access instances. …

Ransomware attackers are exploiting critical SmarterMail vulnerability (CVE-2026-24423)

February 6, 2026

For the third time in two weeks, CISA added a vulnerability (CVE-2026-24423) affecting SmarterTools’ SmarterMail email and collaboration server to its Known Exploited …

SolarWinds fixes critical Web Help Desk RCE vulnerabilities, upgrade ASAP!

January 29, 2026

SolarWinds has fixed six critical and high-severity vulnerabilities in its popular Web Help Desk (WHD) support ticketing and asset management solution, and is urging customers …

watchTowr Active Defense delivers automated protection from exposure to defense

December 9, 2025

watchTowr announced major capability enhancements, including the launch of Active Defense, a new capability that closes the gap between discovery and protection. Active …

Popular code formatting sites are exposing credentials and other secrets

November 25, 2025

Widely used code formatting sites JSONFormatter and CodeBeautify are exposing sensitive credentials, API keys, private keys, configuration files and other secrets, watchTowr …

A suspected Fortinet FortiWeb zero-day is actively exploited, researchers warn

November 14, 2025

A suspected (but currently unidentified) zero-day vulnerability in Fortinet FortiWeb is being exploited by unauthenticated attackers to create new admin accounts on …

CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073)

October 21, 2025

CVE-2025-33073, a Windows SMB Client vulnerability that Microsoft fixed in June 2025, is being exploited by attackers. The confirmation comes from the Cybersecurity and …

Leaked Oracle EBS exploit scripts expected to drive new wave of attacks (CVE-2025-61882)

October 7, 2025

Resecurity and watchTowr researchers have analyzed the leaked scripts used by attackers to exploit CVE-2025-61882 on internet-facing Oracle ESB instances. Whether the …

Attackers exploited critical Fortra GoAnywhere flaw in zero-day attacks (CVE-2025-10035)

September 26, 2025

CVE-2025-10035, a perfect CVSS 10.0 vulnerability in the Fortra GoAnywhere managed file transfer solution, has apparently been exploited in zero-day attacks before the patch …

Commvault plugs holes in backup suite that allow remote code execution

August 20, 2025

Commvault has fixed four security vulnerabilities that may allow unauthenticated attackers to compromise on-premises deployments of its flagship backup and replication suite. …

Fortinet warns about FortiSIEM vulnerability with in-the-wild exploit code (CVE-2025-25256)

August 13, 2025

Fortinet has released patches for a critical OS command injection vulnerability (CVE-2025-25256) in FortiSIEM, after practical exploit code surfaced in the wild. About …

Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257)

July 14, 2025

With two proof-of-concept (PoC) exploits made public late last week, CVE-2025-25257 – a critical SQL command injection vulnerability in Fortinet’s FortiWeb web …