Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

sudo

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

CVE-2023-42465 is a vulnerability identified in sudo versions before 1.9.15, where the application logic for handling error codes is flawed. Specifically, sudo sometimes determines authentication success or failure by checking that a return value does not equal an error code, rather than explicitly confirming a success code. This logic, combined with the fact that the error codes used do not have protections against single-bit flips, opens the door for row hammer attacks. Row hammer is a hardware-based attack that induces bit flips in memory by repeatedly accessing adjacent memory rows, potentially altering critical data. In this context, an attacker capable of inducing bit flips in the memory storing sudo's error codes could cause sudo to misinterpret an error as a success, thereby bypassing authentication or escalating privileges. This vulnerability is particularly dangerous because it leverages hardware faults rather than software bugs alone, making traditional software defenses less effective. Although no public exploits have been reported yet, the widespread use of sudo in Unix-like systems, including Linux distributions common in European organizations, means the attack surface is large. The lack of a CVSS score indicates that the vulnerability is newly published and not yet fully assessed, but the technical details suggest a significant risk. The vulnerability requires local access to the system to induce the row hammer effect, but no user interaction or prior authentication is necessary once access is obtained. The complexity of performing a row hammer attack varies depending on hardware and system configuration, but recent research has demonstrated its feasibility on commodity hardware. The vulnerability highlights the need for both software patches and hardware-level mitigations to prevent bit flips. Since sudo is a critical component for privilege management, successful exploitation could lead to full system compromise.

Detailed information about CVE-2023-42465: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-42465: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-42465: n/a

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional