labs.watchtowr.com on Hacker News

A 32-year-old bug walks into a Telnet server(labs.watchtowr.com)

91 points by paimapi 1 month ago | 41 comments

CPanel and WHM Authentication Bypass – CVE-2026-41940(labs.watchtowr.com)

139 points by zikani_03 5 months ago | 52 comments

Stop Putting Your Passwords into Random Websites (Yes, Seriously, You Are the PR(labs.watchtowr.com)

13 points by Deeg9rie9usi 11 months ago | 1 comments

Is This Bad? This Feels Bad. (Fortra GoAnywhere CVE-2025-10035)(labs.watchtowr.com)

34 points by xn--yt9h 1 year ago | 9 comments

Insufficiently sanitized data allows unauthenticated access to FreePBX Admin(labs.watchtowr.com)

43 points by Tiberium 1 year ago | 7 comments

Backdooring Your Backdoors – Another $20 Domain, More Governments(labs.watchtowr.com)

415 points by mooreds 1 year ago | 58 comments

watchTowr Labs blog post on registering abandoned domains referenced by backdoored webshells, gaining access to compromised systems including government servers.

We spent $20 to achieve RCE and accidentally became the admins of .mobi(labs.watchtowr.com)

1545 points by notmine1337 2 years ago | 346 comments

watchTowr Labs blog post describing how registering an expired WHOIS server domain for $20 let them take over .mobi WHOIS and reach RCE paths.