ThreatVectr
Tag

#watchTowr

6 stories taggedwatchTowr.

Illustration: a dimly lit server rack in a corporate data center
Vulnerabilities

Two Citrix NetScaler Zero-Days Are Being Exploited Right Now and There Is No Patch

Researchers at watchTowr say attackers are already breaking into unpatched NetScaler boxes. Citrix has not shipped a fix.

3 min read
A WSO2 API Manager interface on multiple monitors with authentication token generation systems highlighted, digital signatures being forged and administrator ac
Vulnerabilities

Hackers Are Forging Admin Tokens to Take Over WSO2 API Manager

A critical signature-verification bug tracked as CVE-2026-5430 lets attackers forge login tokens and seize administrator accounts. Exploitation is already under way.

4 min read
A software repository server facility with glowing rack-mounted hardware and network cables, while a security alert banner scrolls across a monitoring station's
Vulnerabilities

Hackers Are Already Breaking Into Software Stores Using a Flaw Disclosed Three Days Ago

A critical security hole in JFrog Artifactory, a platform used by thousands of companies to store and ship software, is being actively exploited just 72 hours after its public disclosure.

4 min read
A cybersecurity analyst's workstation with multiple windows open showing file-transfer application code, vulnerability databases, and a functioning exploit code
Vulnerabilities

Working Exploit Published for Cleo Harmony Flaw That Ransomware Gangs Already Love

A newly discovered flaw in the Cleo Harmony file-transfer application lets attackers break in and take control without a password. A working exploit is already public, and Cl0p used a different Cleo bug to hit major organisations just months ago.

3 min read
A security analyst's workstation displaying attack traffic logs and map software vulnerability alerts in real-time, network packets visible crossing between sys
Vulnerabilities

Hackers Are Already Probing a Dangerous, Unpatched Flaw in GeoServer

A newly public security hole in popular mapping software drew hundreds of attack attempts within hours. No fix exists yet.

3 min read
Illustration: a dimly lit corporate server room, rows of rack-mounted servers glowing with amber and blue status lights
Vulnerabilities

Third SharePoint Flaw From July Patch Batch Is Now Being Attacked

CVE-2026-50522 lets unauthenticated attackers run code on SharePoint servers. A public proof-of-concept dropped, and the exploitation followed.

4 min read
© 2026 Threat Vectr