#watchtowr — Public Fediverse posts

CVE-2026-88772, a Citrix NetScaler DTLS memory overflow, is exploited in the wild. A watchTowr PoC and full details are now public. Patch NetScaler now.

#Citrix #NetScaler #CVE202688772 #DTLS #watchTowr #KEV #ZeroDay #RCE

https://securityonline.info/citrix-netscaler-cve-2026-88772-poc-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-88772, a Citrix NetScaler DTLS memory overflow, is exploited in the wild. A watchTowr PoC and full details are now public. Patch NetScaler now.

#Citrix #NetScaler #CVE202688772 #DTLS #watchTowr #KEV #ZeroDay #RCE

https://securityonline.info/citrix-netscaler-cve-2026-88772-poc-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-88772, a Citrix NetScaler DTLS memory overflow, is exploited in the wild. A watchTowr PoC and full details are now public. Patch NetScaler now.

#Citrix #NetScaler #CVE202688772 #DTLS #watchTowr #KEV #ZeroDay #RCE

https://securityonline.info/citrix-netscaler-cve-2026-88772-poc-exploited/?utm_source=mastodon&utm_medium=jetpack_social

watchTowr szerint két befoltozatlan NetScaler RCE zero-dayt aktívan kihasználnak. Mit tennél: lekapcsolod az eszközt vagy kockáztatsz javítás nélkül? Tudd meg a részleteket és lépj gyorsan.

https://linuxmint.hu/hir/2026/09/figyelem-ket-befoltozatlan-citrix-netscaler-rce-zero-dayt-aktivan-tamadnak

#Citrix #NetScaler #zero-day #RCE #watchTowr #kiberbiztonság #patching #incidentresponse #NCSC-NL

watchTowr szerint két befoltozatlan NetScaler RCE zero-dayt aktívan kihasználnak. Mit tennél: lekapcsolod az eszközt vagy kockáztatsz javítás nélkül? Tudd meg a részleteket és lépj gyorsan.

https://linuxmint.hu/hir/2026/09/figyelem-ket-befoltozatlan-citrix-netscaler-rce-zero-dayt-aktivan-tamadnak

#Citrix #NetScaler #zero-day #RCE #watchTowr #kiberbiztonság #patching #incidentresponse #NCSC-NL

Two Citrix NetScaler zero-day RCE flaws are under active exploitation. Citrix confirmed CVE-2026-88771 and CVE-2026-88772 and shipped patches. Update now.

#Citrix #NetScaler #ZeroDay #RCE #CyberSecurity #VPN #watchTowr #PatchNow

https://securityonline.info/citrix-netscaler-zero-day-rce/?utm_source=mastodon&utm_medium=jetpack_social

Two Citrix NetScaler zero-day RCE flaws are under active exploitation. Citrix confirmed CVE-2026-88771 and CVE-2026-88772 and shipped patches. Update now.

#Citrix #NetScaler #ZeroDay #RCE #CyberSecurity #VPN #watchTowr #PatchNow

https://securityonline.info/citrix-netscaler-zero-day-rce/?utm_source=mastodon&utm_medium=jetpack_social

Two Citrix NetScaler zero-day RCE flaws are under active exploitation. Citrix confirmed CVE-2026-88771 and CVE-2026-88772 and shipped patches. Update now.

#Citrix #NetScaler #ZeroDay #RCE #CyberSecurity #VPN #watchTowr #PatchNow

https://securityonline.info/citrix-netscaler-zero-day-rce/?utm_source=mastodon&utm_medium=jetpack_social

Two Citrix NetScaler zero-day RCE flaws are under active exploitation. Citrix confirmed CVE-2026-88771 and CVE-2026-88772 and shipped patches. Update now.

#Citrix #NetScaler #ZeroDay #RCE #CyberSecurity #VPN #watchTowr #PatchNow

https://securityonline.info/citrix-netscaler-zero-day-rce/?utm_source=mastodon&utm_medium=jetpack_social

Two Citrix NetScaler zero-day flaws enabling remote code execution are reportedly under active exploitation. No CVE or patch yet. See mitigation steps.

#Citrix #NetScaler #ZeroDay #RCE #CyberSecurity #VPN #watchTowr #PatchNow

https://securityonline.info/citrix-netscaler-zero-day-rce/?utm_source=mastodon&utm_medium=jetpack_social

Two Citrix NetScaler zero-day flaws enabling remote code execution are reportedly under active exploitation. No CVE or patch yet. See mitigation steps.

#Citrix #NetScaler #ZeroDay #RCE #CyberSecurity #VPN #watchTowr #PatchNow

https://securityonline.info/citrix-netscaler-zero-day-rce/?utm_source=mastodon&utm_medium=jetpack_social

Two Citrix NetScaler zero-day flaws enabling remote code execution are reportedly under active exploitation. No CVE or patch yet. See mitigation steps.

#Citrix #NetScaler #ZeroDay #RCE #CyberSecurity #VPN #watchTowr #PatchNow

https://securityonline.info/citrix-netscaler-zero-day-rce/?utm_source=mastodon&utm_medium=jetpack_social

A public PoC for CVE-2026-64849, an unauthenticated MLflow SSRF (CVSS 9.3), is now live. watchTowr reports exploitation attempts. Patch to 3.15.0.

#MLflow #CVE202664849 #SSRF #watchTowr #AISecurity #InfoSec

https://securityonline.info/mlflow-ssrf-cve-2026-64849/?utm_source=mastodon&utm_medium=jetpack_social

A public PoC for CVE-2026-64849, an unauthenticated MLflow SSRF (CVSS 9.3), is now live. watchTowr reports exploitation attempts. Patch to 3.15.0.

#MLflow #CVE202664849 #SSRF #watchTowr #AISecurity #InfoSec

https://securityonline.info/mlflow-ssrf-cve-2026-64849/?utm_source=mastodon&utm_medium=jetpack_social

This Week in Security: Windows 10 Gets Another Year, SmartTV Botnets, Hiding Payloads, and LastPass Customer Leak

https://fed.brid.gy/r/https://hackaday.com/2026/07/03/this-week-in-security-windows-10-gets-another-year-smarttv-botnets-hiding-payloads-and-lastpass-customer-leak/

This Week in Security: Windows 10 Gets Another Year, SmartTV Botnets, Hiding Payloads, and LastPass Customer Leak

https://fed.brid.gy/r/https://hackaday.com/2026/07/03/this-week-in-security-windows-10-gets-another-year-smarttv-botnets-hiding-payloads-and-lastpass-customer-leak/

⚠️ 👀
Source: Reported by Sina Kheirkhah [@SinSinology] of #watchtowr 🍿
👇
CVE-2026-44963
⬇️
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

Severity: Critical
CVSS v4 Score: 9.4
👇
https://www.veeam.com/kb4869

https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0712/

🩹
👇
https://www.veeam.com/kb4696

#CyberVeille #veeam

⚠️ 👀
Source: Reported by Sina Kheirkhah [@SinSinology] of #watchtowr 🍿
👇
CVE-2026-44963
⬇️
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

Severity: Critical
CVSS v4 Score: 9.4
👇
https://www.veeam.com/kb4869

https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0712/

🩹
👇
https://www.veeam.com/kb4696

#CyberVeille #veeam

⚠️ 👀
Source: Reported by Sina Kheirkhah [@SinSinology] of #watchtowr 🍿
👇
CVE-2026-44963
⬇️
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

Severity: Critical
CVSS v4 Score: 9.4
👇
https://www.veeam.com/kb4869

https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0712/

🩹
👇
https://www.veeam.com/kb4696

#CyberVeille #veeam

⚠️ 👀
Source: Reported by Sina Kheirkhah [@SinSinology] of #watchtowr 🍿
👇
CVE-2026-44963
⬇️
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

Severity: Critical
CVSS v4 Score: 9.4
👇
https://www.veeam.com/kb4869

https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0712/

🩹
👇
https://www.veeam.com/kb4696

#CyberVeille #veeam

watchTowr Active Defense delivers automated protection from exposure to defense https://www.helpnetsecurity.com/2025/12/09/watchtowr-active-defense/ #Industrynews #WatchTowr

watchTowr Active Defense delivers automated protection from exposure to defense https://www.helpnetsecurity.com/2025/12/09/watchtowr-active-defense/ #Industrynews #WatchTowr

watchTowr Active Defense delivers automated protection from exposure to defense https://www.helpnetsecurity.com/2025/12/09/watchtowr-active-defense/ #Industrynews #WatchTowr

Popular code formatting sites are exposing credentials and other secrets https://www.helpnetsecurity.com/2025/11/25/code-formatting-sites-exposing-secrets/ #Don'tmiss #WatchTowr #Hotstuff #dataleak #News

Popular code formatting sites are exposing credentials and other secrets https://www.helpnetsecurity.com/2025/11/25/code-formatting-sites-exposing-secrets/ #Don'tmiss #WatchTowr #Hotstuff #dataleak #News

Popular code formatting sites are exposing credentials and other secrets https://www.helpnetsecurity.com/2025/11/25/code-formatting-sites-exposing-secrets/ #Don'tmiss #WatchTowr #Hotstuff #dataleak #News

Monsta FTP Vulnerability Exposed Thousands of Servers to Full Takeover https://hackread.com/monsta-ftp-flaw-web-servers-open-server-takeover/ #Cybersecurity #Vulnerability #MonstaFTP #watchTowr #Security #RCE

Monsta FTP Vulnerability Exposed Thousands of Servers to Full Takeover https://hackread.com/monsta-ftp-flaw-web-servers-open-server-takeover/ #Cybersecurity #Vulnerability #MonstaFTP #watchTowr #Security #RCE

Monsta FTP Vulnerability Exposed Thousands of Servers to Full Takeover https://hackread.com/monsta-ftp-flaw-web-servers-open-server-takeover/ #Cybersecurity #Vulnerability #MonstaFTP #watchTowr #Security #RCE

CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073) https://www.helpnetsecurity.com/2025/10/21/cisa-warns-of-windows-smb-flaw-under-active-exploitation-cve-2025-33073/ #GuidePointSecurity #WindowsServer #Don'tmiss #Synacktiv #WatchTowr #Hotstuff #Windows #News #CISA #PoC

CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073) https://www.helpnetsecurity.com/2025/10/21/cisa-warns-of-windows-smb-flaw-under-active-exploitation-cve-2025-33073/ #GuidePointSecurity #WindowsServer #Don'tmiss #Synacktiv #WatchTowr #Hotstuff #Windows #News #CISA #PoC

CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073) https://www.helpnetsecurity.com/2025/10/21/cisa-warns-of-windows-smb-flaw-under-active-exploitation-cve-2025-33073/ #GuidePointSecurity #WindowsServer #Don'tmiss #Synacktiv #WatchTowr #Hotstuff #Windows #News #CISA #PoC

@hanno not unlikely, if you have an exploit to chain with it to dump something important to a file.
Have you read some of the recent #watchTowr posts ?

https://labs.watchtowr.com/well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882/

@hanno not unlikely, if you have an exploit to chain with it to dump something important to a file.
Have you read some of the recent #watchTowr posts ?

https://labs.watchtowr.com/well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882/

@hanno not unlikely, if you have an exploit to chain with it to dump something important to a file.
Have you read some of the recent #watchTowr posts ?

https://labs.watchtowr.com/well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882/

Leaked Oracle EBS exploit scripts expected to drive new wave of attacks (CVE-2025-61882) https://www.helpnetsecurity.com/2025/10/07/leaked-oracle-ebs-exploit-attacks-cve-2025-61882/ #Resecurity #Don'tmiss #datatheft #extortion #WatchTowr #Hotstuff #Mandiant #exploit #Oracle #News

Leaked Oracle EBS exploit scripts expected to drive new wave of attacks (CVE-2025-61882) https://www.helpnetsecurity.com/2025/10/07/leaked-oracle-ebs-exploit-attacks-cve-2025-61882/ #Resecurity #Don'tmiss #datatheft #extortion #WatchTowr #Hotstuff #Mandiant #exploit #Oracle #News

Leaked Oracle EBS exploit scripts expected to drive new wave of attacks (CVE-2025-61882) https://www.helpnetsecurity.com/2025/10/07/leaked-oracle-ebs-exploit-attacks-cve-2025-61882/ #Resecurity #Don'tmiss #datatheft #extortion #WatchTowr #Hotstuff #Mandiant #exploit #Oracle #News

Attackers exploited critical Fortra GoAnywhere flaw in zero-day attacks (CVE-2025-10035) https://www.helpnetsecurity.com/2025/09/26/fortra-goanywhere-zero-day-cve-2025-10035/ #enterprise #Don'tmiss #WatchTowr #Hotstuff #Fortra #Rapid7 #0-day #News

Attackers exploited critical Fortra GoAnywhere flaw in zero-day attacks (CVE-2025-10035) https://www.helpnetsecurity.com/2025/09/26/fortra-goanywhere-zero-day-cve-2025-10035/ #enterprise #Don'tmiss #WatchTowr #Hotstuff #Fortra #Rapid7 #0-day #News

Attackers exploited critical Fortra GoAnywhere flaw in zero-day attacks (CVE-2025-10035) https://www.helpnetsecurity.com/2025/09/26/fortra-goanywhere-zero-day-cve-2025-10035/ #enterprise #Don'tmiss #WatchTowr #Hotstuff #Fortra #Rapid7 #0-day #News

Commvault plugs holes in backup suite that allow remote code execution https://www.helpnetsecurity.com/2025/08/20/commvault-backup-suite-vulnerabilities-fixed/ #enterprise #government #Don'tmiss #Commvault #WatchTowr #Hotstuff #backup #News

Commvault plugs holes in backup suite that allow remote code execution https://www.helpnetsecurity.com/2025/08/20/commvault-backup-suite-vulnerabilities-fixed/ #enterprise #government #Don'tmiss #Commvault #WatchTowr #Hotstuff #backup #News

Commvault plugs holes in backup suite that allow remote code execution https://www.helpnetsecurity.com/2025/08/20/commvault-backup-suite-vulnerabilities-fixed/ #enterprise #government #Don'tmiss #Commvault #WatchTowr #Hotstuff #backup #News

SonicWall Urges Patch After 3 Major VPN Vulnerabilities Disclosed – Source:hackread.com https://ciso2ciso.com/sonicwall-urges-patch-after-3-major-vpn-vulnerabilities-disclosed-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #Vulnerability #SonicWall #watchTowr #Hackread #security #DoS #RCE #SSL

SonicWall Urges Patch After 3 Major VPN Vulnerabilities Disclosed – Source:hackread.com https://ciso2ciso.com/sonicwall-urges-patch-after-3-major-vpn-vulnerabilities-disclosed-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #Vulnerability #SonicWall #watchTowr #Hackread #security #DoS #RCE #SSL

SonicWall Urges Patch After 3 Major VPN Vulnerabilities Disclosed – Source:hackread.com https://ciso2ciso.com/sonicwall-urges-patch-after-3-major-vpn-vulnerabilities-disclosed-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #Vulnerability #SonicWall #watchTowr #Hackread #security #DoS #RCE #SSL

SonicWall Urges Patch After 3 Major VPN Vulnerabilities Disclosed https://hackread.com/sonicwall-patch-after-3-vpn-vulnerabilities-disclosed/ #Cybersecurity #Vulnerability #SonicWall #watchTowr #Security #DoS #RCE #SSL

SonicWall Urges Patch After 3 Major VPN Vulnerabilities Disclosed https://hackread.com/sonicwall-patch-after-3-vpn-vulnerabilities-disclosed/ #Cybersecurity #Vulnerability #SonicWall #watchTowr #Security #DoS #RCE #SSL

SonicWall Urges Patch After 3 Major VPN Vulnerabilities Disclosed https://hackread.com/sonicwall-patch-after-3-vpn-vulnerabilities-disclosed/ #Cybersecurity #Vulnerability #SonicWall #watchTowr #Security #DoS #RCE #SSL

Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257) https://www.helpnetsecurity.com/2025/07/14/exploits-for-unauthenticated-fortiweb-rce-are-public-so-patch-quickly-cve-2025-25257/ #webapplicationsecurity #vulnerability #Don'tmiss #WatchTowr #Hotstuff #Fortinet #exploit #Rapid7 #News #PoC

Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257) https://www.helpnetsecurity.com/2025/07/14/exploits-for-unauthenticated-fortiweb-rce-are-public-so-patch-quickly-cve-2025-25257/ #webapplicationsecurity #vulnerability #Don'tmiss #WatchTowr #Hotstuff #Fortinet #exploit #Rapid7 #News #PoC

Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257) https://www.helpnetsecurity.com/2025/07/14/exploits-for-unauthenticated-fortiweb-rce-are-public-so-patch-quickly-cve-2025-25257/ #webapplicationsecurity #vulnerability #Don'tmiss #WatchTowr #Hotstuff #Fortinet #exploit #Rapid7 #News #PoC

Check for CitrixBleed 2 exploitation even if you patched quickly! (CVE-2025-5777) https://www.helpnetsecurity.com/2025/07/08/cve-2025-5777-indicators-of-compromise/ #Horizon3ai #ReliaQuest #Don'tmiss #NetScaler #WatchTowr #Hotstuff #exploit #Citrix #News #PoC

Check for CitrixBleed 2 exploitation even if you patched quickly! (CVE-2025-5777) https://www.helpnetsecurity.com/2025/07/08/cve-2025-5777-indicators-of-compromise/ #Horizon3ai #ReliaQuest #Don'tmiss #NetScaler #WatchTowr #Hotstuff #exploit #Citrix #News #PoC

Check for CitrixBleed 2 exploitation even if you patched quickly! (CVE-2025-5777) https://www.helpnetsecurity.com/2025/07/08/cve-2025-5777-indicators-of-compromise/ #Horizon3ai #ReliaQuest #Don'tmiss #NetScaler #WatchTowr #Hotstuff #exploit #Citrix #News #PoC

PoC exploit for SysAid pre-auth RCE released, upgrade quickly! https://www.helpnetsecurity.com/2025/05/07/poc-exploit-for-sysaid-pre-auth-rce-released-upgrade-quickly/ #vulnerability #enterprise #Don'tmiss #WatchTowr #Hotstuff #SysAid #News #ITSM #SMBs #PoC

PoC exploit for SysAid pre-auth RCE released, upgrade quickly! https://www.helpnetsecurity.com/2025/05/07/poc-exploit-for-sysaid-pre-auth-rce-released-upgrade-quickly/ #vulnerability #enterprise #Don'tmiss #WatchTowr #Hotstuff #SysAid #News #ITSM #SMBs #PoC

PoC exploit for SysAid pre-auth RCE released, upgrade quickly! https://www.helpnetsecurity.com/2025/05/07/poc-exploit-for-sysaid-pre-auth-rce-released-upgrade-quickly/ #vulnerability #enterprise #Don'tmiss #WatchTowr #Hotstuff #SysAid #News #ITSM #SMBs #PoC

watchTowr Warns of Active Exploitation of SonicWall SMA 100 Devices https://hackread.com/watchtowr-exploits-target-sonicwall-sma-100-devices/ #Cybersecurity #Vulnerability #CyberAttack #SonicWall #watchTowr #Security #CISA