Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
0 results for “watchTowr”
PHP development team plans to release updates tomorrow to address two vulnerabilities, each rated 9.2; security researchers at watchTowr say they are RCE flaws (Lawrence Abrams/BleepingComputer)
The PHP development team is issuing emergency security updates to patch two critical remote code execution (RCE) vulnerabilities, each scored 9.2 on the CVSS scale, following disclosure by watchTowr researchers.
Oct 21, 2026
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
A critical cryptographic signature verification flaw (CVE-2026-5430, CVSS 9.8) in WSO2 API Manager is being actively exploited to forge admin JWT tokens and enable unauthorized account takeover.
Sep 16, 2026
GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE
A zero-day SQL injection vulnerability in the open-source GeoServer platform is under active exploitation, enabling remote code execution, with no patch yet available and no assigned CVE identifier.
Published Aug 13, 2026 · Analyzed Aug 17, 2026