watchTowr Labs

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenAug 16, 2026
Last mentionedSep 11, 2026

Timeline

3 articles · newest first

GitLab’s critical flaw is already drawing internet-wide probes

GitLab patches two critical flaws (CVE-2026-85706 CVSS 10.0, CVE-2026-87719) as WatchTowr observes internet-wide probing of the unauthenticated file-read bug.

CyberScoopSep 11, 18:41 UTC · Sep 11, 2026VulnerabilityExploitedCVE-2026-85706 CVE-2026-877192

Previously patched Citrix NetScaler flaw exploited in the wild (CVE-2026-8452)

Actively exploited Citrix NetScaler flaw CVE-2026-8452, patched in June, now added to CISA KEV; attackers deploy web shells and run discovery commands.

Help Net SecurityAug 27, 00:00 UTC · Aug 27, 2026Exploit / PoCExploitedCVE-2026-8452 CVE-2015-3246 CVE-2015-5287+32 · 1 read

Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware

Infoblox finds dropcatch expired domains fuel malware delivery and C2, with actor Sable Squirrel spending ~$7M on 10,000+ domains.

Security AffairsAug 16, 17:17 UTC · Aug 16, 2026Threat actor2 · 1 read

Related CVEs

by mentions

CVE-2026-8570697%10.0
Unauthenticated Path Traversal Arbitrary File Read in GitLab CE/EE
published Sep 12, 2026GitLab Community EditionKEVPoC ×13
CVE-2021-2375883%9.8
Unauthenticated .NET Deserialization RCE in Ajax.NET Professional (ajaxpro.2)
published Dec 3, 2021michaelschwarz (ajaxpro.2 project) ajaxpro.2 (package)KEVPoC ×2
CVE-2026-84521%8.8
Memory Buffer Overflow in Citrix NetScaler ADC/Gateway Exploited in the Wild
published Jun 30, 2026Citrix NetScaler ADCKEVPoC
CVE-2019-106857%8.8
Remote Code Execution in Microsoft SQL Server 2016 and 2017
published Jul 15, 2019Microsoft SQL ServerKEV
CVE-2022-09959%7.8
Out-of-Bounds Write in Linux Kernel watch_queue Enables Local Privilege Escalation
published Mar 25, 2022Linux kernelKEVPoC ×2
CVE-2015-32469%7.4
Race Condition in Red Hat libuser Allows Local Privilege Escalation
published Aug 11, 2015Red Hat libuserKEVPoC
CVE-2015-52875%—
Local Privilege Escalation via Symlink Attack in Red Hat ABRT
published —Red Hat Automatic Bug Reporting Tool (ABRT)KEV
CVE-2026-877199.9
Authenticated GraphQL Subscription Flaw Leaks Search Credentials in GitLab EE
published Sep 12, 2026GitLab EE

Appears with

GitLabvendor · 2
CISAvendor · 2
GitLaborganization · 1
CISAorganization · 1
NetScaler Gatewayproduct · 1
Sable Squirrelthreat actor · 1
Citrixvendor · 1
Advanced Searchproduct · 1
Defusedvendor · 1
SocGholishthreat actor · 1
AsyncRATproduct · 1
Infobloxvendor · 1
General Electricorganization · 1
GitLab CEproduct · 1
Previdianvendor · 1
Swiping Squirrelthreat actor · 1

Entities are extracted by the model from each article. First seen Aug 16, 2026, last mentioned Sep 11, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.