Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

aws-sam-cli

AWS SAM CLI versions from 1.70.0 up to but not including 1.122.0 expose sensitive information through insecure logging. Specifically, sensitive data provided in the DockerBuildArgs parameter of the SAM template is output in clear text to STDERR during the sam build command. This can lead to unintended disclosure of secrets. A patch is available in version 1.122.0 and later.

The AWS Serverless Application Model (SAM) CLI allows building container images with DockerBuildArgs parameters that may contain sensitive data. In affected versions (>=1.70.0 <1.122.0), this sensitive data is logged in clear text to STDERR during the sam build process, exposing secrets. This vulnerability is addressed by a patch included in aws-sam-cli version 1.122.0 and above.

Detailed information about Aws sam cli: Sensitive Information Exposure Through Insecure Logging For Secrets Like Metadata.DockerBuildArgs affecting null aws-sam

Aws sam cli: Sensitive Information Exposure Through Insecure Logging For Secrets Like Metadata.DockerBuildArgs - Live Threat Intelligence - Threat Radar | OffSeq.com

Aws sam cli: Sensitive Information Exposure Through Insecure Logging For Secrets Like Metadata.DockerBuildArgs

If a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer.

Cookie values that are too long are now rejected.

CVE-2026-27459 is a buffer overflow vulnerability in the pyOpenSSL library affecting the set_cookie_generate_callback function used to generate DTLS cookies. If the custom callback returns a cookie longer than 256 bytes, a buffer overflow occurs due to missing bounds checking before copying data into a fixed-size buffer in OpenSSL. This can lead to memory corruption, potential unauthorized code execution, or denial of service. The vulnerability requires a custom callback returning an excessively long cookie, limiting exposure. Red Hat's advisory rates the severity as important and recommends ensuring the callback limits cookie length to under 256 bytes. The issue is tracked under multiple CWEs including CWE-120 (classic buffer overflow).

Detailed information about Red Hat Security Advisory: RHTAS 1.4 - GA Release of Model Transparency affecting Red Hat Product Security Red Hat. Get real-time upd

Red Hat Security Advisory: RHTAS 1.4 - GA Release of Model Transparency - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/security/updates/classification/#important

Canonical URL

https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4

https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index

https://access.redhat.com/security/cve/CVE-2026-30922

https://access.redhat.com/security/cve/CVE-2026-32597

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/errata/RHSA-2026:48758

https://access.redhat.com/security/cve/CVE-2026-62995

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2026-67314

https://access.redhat.com/security/cve/CVE-2026-67313

https://access.redhat.com/security/cve/CVE-2026-67321

https://access.redhat.com/security/cve/CVE-2026-67312

https://access.redhat.com/security/cve/CVE-2026-67320

https://access.redhat.com/security/cve/CVE-2026-73086

Aws sam cli: pyOpenSSL DTLS cookie callback buffer overflow (CVE-2026-27459)


Aws sam cli: Sensitive Information Exposure Through Insecure Logging For Secrets Like Metadata.DockerBuildArgs 0 AWS SAM CLI versions from 1.70.0 up to but not including 1.122.0 expose sensitive information through insecure logging. Specifically, sensitive data provided in the DockerBuildArgs parameter of the SAM template is output in clear text to STDERR during the sam build command. This can lead to unintended disclosure of secrets. A patch is available in version 1.122.0 and later. MediumVulnerability#gcve #osv #brew-aws-sam-cli-ghsa-rjc6-vm4h-85cg Join the discussion	GCVE Database	08/13/2026, 16:37:01 UTC Added: 09/18/2026, 01:04:27 UTC
Aws sam cli: pyOpenSSL DTLS cookie callback buffer overflow (CVE-2026-27459)CVE-2026-27459 0 If a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Cookie values that are too long are now rejected. HighVulnerability#gcve #csaf #cve-2026-27459 Join the discussion	GCVE Database	08/13/2026, 16:37:01 UTC Added: 05/26/2026, 20:58:36 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional