watchTowr

watchTowr enables organizations to get ahead of in-the-wild exploitation with Preemptive Exposure Management technology.
This account is a replica from Twitter. Its author can't see your replies. If you find this service useful, please consider supporting us via our Patreon.

Location: All your edge devices
Official: https://twitter.com/watchtowrcyber
Support this service: https://www.patreon.com/birddotmakeup

Last Notes

2026-03-27 20:35:00 UTC

watchTowr Intel is detecting active reconnaissance against NetScalers for CVE-2026-3055 through our Attacker Eye honeypot network.
Exploitation is likely imminent. Patch now.
watchTowr clients already have access to internal mechanisms to confidently identify their exposure.
https://pbs.twimg.com/media/HEcdMc7WIAEA5vX.png

2026-01-27 20:13:32 UTC

- reply

https://labs.watchtowr.com/well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882/

2026-01-27 20:11:39 UTC

absolutely fantastic
https://pbs.twimg.com/media/G_siC5VWEAAQv3u.jpg

2026-01-09 02:01:00 UTC

- reply

gasp https://portal.smartertools.com/community/a97650/cve.aspx

2026-01-08 18:31:31 UTC

And, we're back - analyzing CVE-2025-52691, a pre-auth RCE in SmarterTools SmarterMail mail server solution.
Speak soon (:^)) and enjoy..
https://labs.watchtowr.com/do-smart-people-ever-say-theyre-smart-smartertools-smartermail-pre-auth-rce-cve-2025-52691/

2025-10-06 21:08:58 UTC

Following our now published analysis, we've released our Detection Artifact Generator for the Oracle EBS pre-auth RCE chain (CVE-2025-61882), giving defenders the same tools attackers already have.
https://github.com/watchtowrlabs/watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882/

2025-09-23 10:46:19 UTC

🚨 SolarWinds, the gift that keeps on giving: a new Web Help Desk patch bypass, CVE-2025-26399, enables unauthenticated RCE via deserialization.
It’s a patch bypass of CVE-2024-28988/CVE-2024-28986 - previously exploited.
Given SolarWinds’ past, in-the-wild exploitation is highly likely. Patch now.
Need help assessing your exposure? https://watchtowr.com/
https://pbs.twimg.com/media/G1hlzMIWYAAA9rV.jpg

2025-07-04 19:17:37 UTC

Are we bleeding out? Enjoy our analysis of CitrixBleed 2, aka CVE-2025-5777 - the "new" Citrix NetScaler Memory Leak vulnerability.
We've been using this mechanism to identify vulnerable systems, and hope it helps the teams that need it.. enjoy!
https://labs.watchtowr.com/how-much-more-must-we-bleed-citrix-netscaler-memory-disclosure-citrixbleed-2-cve-2025-5777

2025-04-04 11:55:18 UTC

https://pbs.twimg.com/media/GnsGryPbEAA1Bk1.png

2025-03-27 07:32:02 UTC

We are nearing the end of our 90 day disclosure window for an unauth RCE in a solution previously targeted by ransomware gangs - with no engagement from the vendor. Once again, this must be absolutely brilliant for their customers.
Speak soon.