Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

gnutls

A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.

CVE-2024-0553 is a timing side-channel vulnerability discovered in GnuTLS version 3.8.0, specifically within the RSA-PSK ClientKeyExchange implementation. The vulnerability stems from observable discrepancies in response times when the system processes malformed ciphertexts versus ciphertexts with correct PKCS#1 v1.5 padding during the RSA-PSK key exchange. This timing difference can be measured remotely by an attacker to perform a side-channel attack, potentially allowing them to recover sensitive cryptographic material such as private keys or session keys. The flaw is a continuation or incomplete fix of the previously identified CVE-2023-5981, indicating that the underlying issue with timing leakage was not fully resolved. The attack vector requires no privileges or user interaction and can be executed over a network, making it accessible to remote attackers. While no active exploits have been reported, the vulnerability's CVSS score of 7.5 reflects its high severity due to the potential confidentiality impact. The vulnerability affects systems using GnuTLS 3.8.0 with RSA-PSK key exchange enabled, which is commonly used in secure communications protocols. The timing side-channel attack leverages subtle differences in cryptographic operation durations to infer protected data, a known class of cryptographic vulnerabilities that can undermine the security guarantees of TLS implementations.

Detailed information about CVE-2024-0553: Observable Discrepancy. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-0553: Observable Discrepancy - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-0553: Observable Discrepancy

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional