Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

com.yamaha.sc.hpcontroller

Incorrect access control in the firmware update and download processes of Yamaha Headphones Controller v1.6.7 allows attackers to access sensitive information by analyzing the code and data within the APK file.

CVE-2024-48542 is a vulnerability identified in the Yamaha Headphones Controller application version 1.6.7. The root cause is incorrect access control in the firmware update and download processes, which means that the application does not properly enforce authorization checks when handling firmware-related operations. Attackers can exploit this flaw by analyzing the APK file of the application to extract sensitive information, potentially including firmware binaries or cryptographic keys. The vulnerability does not require privileges or user interaction, making it easier to exploit in local scenarios where an attacker has access to the device or the APK file. The CVSS 3.1 score of 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects that the attack vector is local, with low complexity, no privileges or user interaction needed, and impacts confidentiality, integrity, and availability at a high level. This vulnerability is categorized under CWE-863, which involves improper authorization, indicating that the application fails to verify whether the requesting entity is authorized to perform firmware update or download operations. Although no public exploits have been reported, the potential for attackers to manipulate firmware or extract sensitive data poses a significant risk to device security and user privacy. The lack of available patches at the time of disclosure necessitates immediate attention from users and organizations to mitigate risk.

Detailed information about CVE-2024-48542: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-48542: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48542: n/a

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional