Full Width [alt+shift+f] Shortcuts [alt+shift+k]
Sign Up [alt+shift+s] Log In [alt+shift+l]
20
Surprise surprise, we've done it again. We've demonstrated an ability to compromise significantly sensitive networks, including governments, militaries, space agencies, cyber security companies, supply chains, software development systems and environments, and more. “Ugh, won’t they just stick to creating poor-quality memes?” we
a month ago

Improve your reading experience

Logged in users get linked directly to articles resulting in a better reading experience. Please login for free, it takes less than 1 minute.

More from watchTowr Labs

The Best Security Is When We All Agree To Keep Everything Secret (Except The Secrets) - NAKIVO Backup & Replication (CVE-2024-48248)

As an industry, we believe that we’ve come to a common consensus after 25 years of circular debates - disclosure is terrible, information is actually dangerous, it’s best that it’s not shared, and the only way to really to ensure that no one ever

a week ago 12 votes
Get FortiRekt, I am the Super_Admin Now - FortiOS Authentication Bypass CVE-2024-55591

Welcome to Monday, and what an excitingly fresh start to the week we're all having. Grab your coffee, grab your vodka - we're diving into a currently exploited-in-the-wild critical Authentication Bypass affecting foRtinet's (we are returning the misspelling gesture 🥰) flagship SSLVPN appliance, the

a month ago 20 votes
Exploitation Walkthrough and Techniques - Ivanti Connect Secure RCE (CVE-2025-0282)

As we saw in our previous blogpost, we fully analyzed Ivanti’s most recent unauthenticated Remote Code Execution vulnerability in their Connect Secure (VPN) appliance. Specifically, we analyzed CVE-2025-0282. Today, we’re going to walk through exploitation. Once again, however, stopping short of providing the world with a

a month ago 34 votes
Do Secure-By-Design Pledges Come With Stickers? - Ivanti Connect Secure RCE (CVE-2025-0282)

Did you have a good break? Have you had a chance to breathe? Wake up. It’s 2025, and the chaos continues. Haha, see what we did? We wrote the exact same thing in 2024 because 2024 was exactly the same. As an industry, we are on GroundHog day

2 months ago 36 votes

More in technology

This Arduino device helps ‘split the G’ on a pint of Guinness

Guinness is one of those beers (specifically, a stout) that people take seriously and the Guinness brand has taken full advantage of that in their marketing. They even sell a glass designed specifically for enjoying their flagship creation, which has led to a trend that the company surely appreciates: “splitting the G.” But that’s difficult […] The post This Arduino device helps ‘split the G’ on a pint of Guinness appeared first on Arduino Blog.

17 hours ago 2 votes
What's root mean square voltage?

And how do we derive its value for sine waves?

6 hours ago 1 votes
Why Website Taxonomies Drift (and What to Do about It)

AI is everywhere, but most websites are still managed manually by humans using content management systems like WordPress and Drupal. These systems provide means for tagging and categorizing content. But over time, these structures degrade. Without vigilance and maintenance, taxonomies become less useful and relevant over time. Users struggle to find stuff. Ambiguity creeps in. Search results become incomplete and unreliable. And as terms proliferate, the team struggles to maintain the site, making things worse. The site stops working as well as it could. Sales, engagement, and trust suffer. And the problem only gets worse over time. Eventually, the team embarks on a redesign. But hitting the reset button only fixes things for a while. Entropy is the nature of things. Systems tend toward disorder unless we invest in keeping them organized. But it’s hard: small teams have other priorities. They’re under pressure to publish quickly. Turnover is high. Not ideal conditions for consistent tagging. Many content teams don’t have governance processes for taxonomies. Folks create new terms on the fly, often without checking whether similar ones exist. But even when teams have the structures and processes needed to do it right, content and taxonomies themselves change over time as the org’s needs and contexts evolve. The result is taxonomy drift, the gradual misalignment of the system’s structures and content. It’s a classic “boiled frog” situation: since it happens slowly, teams don’t usually recognize it until symptoms emerge. By then, the problem is harder and more expensive to fix. Avoiding taxonomy drift calls for constant attention and manual tweaking, which can be overwhelming for resource-strapped teams. But there’s good news on the horizon: this is exactly the kind of gradual, large-scale, boring challenge where AIs can shine. I’ve worked on IA redesigns for content-heavy websites and have seen the effects of taxonomy drift firsthand. Often, one person is responsible for keeping the website organized, and they’re overwhelmed. After a redesign, they face three challenges: Implementing the new taxonomy on the older corpus. Learning to use the new taxonomy in their workflows. Adapting and evolving the taxonomy so it remains useful and consistent over time. AI is well-suited to tackling these challenges. LLMs excel at pattern matching and categorizing existing text at scale. Unlike humans, AIs don’t get overwhelmed or bored when categorizing thousands of items over and over again. And with predefined taxonomies, they’re not as prone to hallucinations. I’ve been experimenting with using AI to solve taxonomy drift, and the results are promising. I’m building a product to tackle this issue, and looking implement the approach in real-world scenarios. If you or someone you know is struggling to keep a content-heavy website organized, please get in touch.

yesterday 2 votes
Why are sine waves so common?

A simple question that takes some effort to answer in a satisfying way.

yesterday 4 votes
Intel and the New Millenium

Losing the performance crown

2 days ago 4 votes