Jake retweeted
The 1995 cult film "Hackers" was released 31 years ago today. HackersDay.com
#Hackers #HackersDay #HackersMovie #HackThePlanet
On a given day, we capture the exploitation of SO many unique vulnerabilities, it's hard to know what to post about. We've been tracking a list of interesting bugs we've been waiting to show up.
These include hard-to-reproduce vulns, but also vibecodable bugs that can be reproduced from patches alone, and tracking the time-to-exploit.
Months ago, we reproduced CVE-2026-5430, an Auth Bypass in WSO2 API Manager, and we're now finally seeing exploitation in the wild.
In a time of just prompting to reproduce vulnerabilities, it's interesting to see what gets picked up in hours, weeks, months, or not at all, even with readily available public exploit code.
š @watchtowrcyber Intel captured real, hands-on-keyboard exploitation of the recent PaperCut NG/MF vulnerabilities, including fully decrypting webshell and C2 comms.
Check it out: watchtowr.com/resources/papeā¦
Jake retweeted
wp2shell: 22 minutes to reproduce with Project Red. 11 minutes later, Active Defense pushed mitigations. All before in-the-wild exploitation began.
A pre-auth RCE in WordPress: disclosure to exploitation in hours.
Preemptive Exposure Management, built to outpace attackers.
Jake retweeted
Happy Friday!
We're back with our analysis of Check Point's friendly CVE-2026-50751, an Authentication Bypass in their.. security-boundary-enforced-by-authentication SSL VPN products...
Enjoy!
labs.watchtowr.com/marking-yā¦
Jake retweeted
Stop Putting Your Passwords Into Random Websites (Yes, Seriously, You Are The Problem) - Jake Knott (@inkmoro)
labs.watchtowr.com/stop-puttā¦
Jake retweeted
Are we bleeding out? Enjoy our analysis of CitrixBleed 2, aka CVE-2025-5777 - the "new" Citrix NetScaler Memory Leak vulnerability.
We've been using this mechanism to identify vulnerable systems, and hope it helps the teams that need it.. enjoy!
labs.watchtowr.com/how-much-ā¦
This was extremely fun, any chance to collaborate with @SinSinology normally results in š„!
This was hella fun, together with my colleague Jake (@inkmoro) we worked on this target, chaining pre-auth XXE(s) that allowed for limited file read to leak the plain-text admin password! After that, a post-auth command injection for RCE as NT SYSTEM (^_^)
Jake retweeted
8 million requests, $400 later - weāre back. š
We have demonstrated supply chain attacks that could have allowed us to trivially compromise critical infra. networks, including .gov, .mil, and more.
This is real Attack Surface Management.
labs.watchtowr.com/8-millionā¦
Jake retweeted
happy Monday! We've released our analysis and Detection Artifact Generator for Fortinet's CVE-2024-55591...
labs.watchtowr.com/get-fortiā¦
Jake retweeted
You knew it was comingā¦ Cleo Harmony, VLTrader, and LexiCom - RCE via Arbitrary File Write (CVE-2024-50623)
labs.watchtowr.com/cleo-cve-ā¦
Jake retweeted
š weāve watched APTs recently ravage lawful interception systems, and wanted our own capabilitiesā¦
Join us on a journey today into Mitelās MiCollab - that originally started to reproduce CVE-2024-35286, and quickly unravelled into moreā¦
labs.watchtowr.com/where-theā¦
Jake retweeted
in today's 'no way, is it real?' we found out that Palo Alto's PAN-OS CVE-2024-0012 and CVE-2024-9474 were the equivalents of saying 'turn off auth and give me a shell'.
Enjoy!
labs.watchtowr.com/pots-and-ā¦
Jake retweeted
hop skip jump over to our latest blog post - analysing Fortinet's FortiJump CVE-2024-47575, FortiJump-Higher (we love this nameš) and beyond (PoC included)
labs.watchtowr.com/hop-skip-ā¦
Jake retweeted
thank you Citrix for democratising Remote Desktop access
Before we hop skip JUMP to Friday (stop downplaying please)
labs.watchtowr.com/visionariā¦
Jake retweeted
In August, watchTowr Labs hijacked parts of the global .mobi TLD - and went on to discover the mayhem that we could cause.
Enjoy....
labs.watchtowr.com/we-spent-ā¦
I work with some insanely talented people, have a read of the latest š„ š:
Happy Monday! watchTowr Labs member @SinSinology deep dives into Veeam Backup & Response CVE-2024-40711 in our latest post š
labs.watchtowr.com/veeam-bacā¦
We hope you enjoy it!
(as always, where there's smoke - there is fire š for next time..)
