watchcatcyber

BiuTrap Honeypot Platform

[watchcatcyber @watchcatcyber]

🎯 CVE-2026-116366 | ClickHouse HTTP Interface | Code Execution
📈 9 attack requests from 4 unique IPs in the last 90 days

#BiuTrap #ThreatIntel #CVE2026116366 https://t.co/8uHCuAWBb8

[watchcatcyber @watchcatcyber]

🎯 CVE-2024-10441 | Synology BeeStation | Command Execution

Real attack traffic captured live by BiuTrap honeypots 👇
#synology #BiuTrap #ThreatIntel #CVE202410441 https://t.co/NI9MFPibHZ

[watchcatcyber @watchcatcyber]

@mingzi206 https://t.co/Mvnvj9g2qY

[watchcatcyber @watchcatcyber]

https://t.co/jeyUi5HvYD

[watchcatcyber @watchcatcyber]

🚨 Synology NAS Ransomware Incident

A Synology NAS has reportedly been hit by ransomware, with encrypted files bearing the .L0CK3D extension.

The initial access vector, ransomware family, and exploited vulnerability (if any) remain unknown. No specific CVE has been confirmed.

⚠️ Immediate response:
Isolate the NAS from the internet and affected network segments.
Protect offline backups and accessible snapshots.
Preserve DSM, authentication, firewall logs, and ransom notes.
Audit exposed services, suspicious accounts, and DSM security updates.
Restore only after containment and system integrity checks.

The .L0CK3D extension alone is insufficient for attribution.

Anyone with related samples, IOCs, or technical findings?

#Synology #Ransomware #IncidentResponse #CyberSecurity
https://t.co/GIcfL3FE6N

[watchcatcyber @watchcatcyber]

🎯 CVE-2026-101767 | Oracle E-Business Suite | SQL Injection
📈 159 attack requests from 2 unique IPs in the last 90 days

#BiuTrap #ThreatIntel #CVE2026101767 https://t.co/bVfsAFKmtz

[watchcatcyber @watchcatcyber]

🎯 CVE-2026-51884 | Langchain-Chatchat | File Upload
📈 42 attack requests from 17 unique IPs in the last 90 days

#BiuTrap #ThreatIntel #CVE202651884 https://t.co/plfuvj4hH0

[watchcatcyber @watchcatcyber]

🎯 php2shell (CVE-2026-109618 、 CVE-2026-109619)

Too many AI-generated PoCs are being captured in real time by BiuTrap honeypots. 👇

#BiuTrap #ThreatIntel #CVE2026109618 https://t.co/eJRuAKqoA3

[watchcatcyber @watchcatcyber]

🚨 Ivanti Connect Secure Authentication bypass

🎯 CVE-2026-104935 | Ivanti Connect Secure | Authentication bypass

Real attack traffic captured live by BiuTrap honeypots 👇

#BiuTrap #ThreatIntel #CVE2026104935 https://t.co/LtrvP6Zkwv

[watchcatcyber @watchcatcyber]

🚨 BiuTrap Honeypot Detects Probing Activity Targeting TrueConf

Our honeypot has recently detected probing activity targeting TrueConf on port 4307, potentially related to CVE-2026-72529.

The connection to this vulnerability has not yet been confirmed. Further analysis of subsequent traffic and attack patterns is needed to determine whether this activity involves vulnerability scanning or automated exploitation attempts.

🔎 We will continue monitoring for follow-up activity, focusing on exploitation attempts, attack signatures, and emerging threat indicators.

⚠️ Organizations running TrueConf are advised to review their exposed services and monitor official security advisories for updates.

Stay vigilant. Track attacks. Uncover threats.
https://t.co/0NQxFHARCz

#BiuTrap #ThreatIntelligence #Honeypot #TrueConf #CVE202672529 #CyberSecurity

[watchcatcyber @watchcatcyber]

🚨Honeypot Alert:CVE-2026-73570 (Zimbra Collaboration Suite unauthenticated RCE / OS Command Injection) is under active exploitation!Our honeypots have been detecting ongoing scanning and exploitation attempts targeting this vulnerability. #Zimbra #RCE https://t.co/MEfNt8V67m

[watchcatcyber @watchcatcyber]

🚨 Honeypot Alert: We have captured active exploitation attempts against #CVE-2026-59310 (Critical VMware vCenter directory traversal, CVSS 9.8)!Patch immediately if you haven't already.#ThreatIntel #Honeypot #VMware #CyberSecurity

https://t.co/bkB4jZBtzV

[watchcatcyber @watchcatcyber]

CVE-2026-4681 is being actively exploited in the wild. Today, we detected an actor exploiting this vulnerability against our PTC Windchill PLM honeypots. This vulnerability has no public POC code exists.

https://t.co/yxkZ439pwJ