Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

1password

1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient.

CVE-2024-42219 is a vulnerability identified in 1Password 8 for macOS versions before 8.10.36. The root cause is insufficient validation of XPC (Cross-Process Communication) messages, which are used for inter-process communication on macOS. This flaw allows a local attacker with limited privileges to exploit the XPC interface to exfiltrate vault items stored within 1Password. The vulnerability is classified under CWE-1289, indicating improper validation of inter-process communication. Because 1Password stores highly sensitive credentials and secrets, unauthorized access to vault items can lead to severe confidentiality breaches. The CVSS v3.1 score is 7.0 (high), reflecting the significant impact on confidentiality, integrity, and availability, combined with the requirement for local access and high attack complexity. No user interaction is needed, and the scope is unchanged, meaning the attack affects only the vulnerable component. Although no exploits are currently known in the wild, the potential for damage is substantial given the nature of the data protected by 1Password. The vulnerability was published on August 6, 2024, and users are advised to update to version 8.10.36 or later, where the issue has been addressed.

Detailed information about CVE-2024-42219: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-42219: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-42219: n/a

1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms.

CVE-2024-42218 is a vulnerability identified in 1Password 8 for macOS versions before 8.10.38 that enables local attackers to bypass macOS-specific security mechanisms designed to protect vault items. The vulnerability stems from improper enforcement of access controls or sandboxing restrictions, classified under CWE-1289, which relates to bypassing security features. An attacker with limited privileges on the affected macOS system can exploit this flaw to exfiltrate sensitive vault data, including passwords and secrets stored within 1Password. The attack vector requires local access (AV:L), high attack complexity (AC:H), and low privileges (PR:L), but no user interaction (UI:N). The scope is unchanged (S:U), meaning the exploit affects only the vulnerable component without impacting other system components. The impact on confidentiality and integrity is high (C:H/I:H), while availability is unaffected (A:N). No public exploits have been reported yet, but the vulnerability poses a significant risk in environments where local access cannot be fully controlled. The absence of a patch link suggests that users should monitor official 1Password updates closely and apply version 8.10.38 or later once available. This vulnerability highlights the importance of robust local security controls and the risks posed by privilege escalation or lateral movement within macOS environments.

Detailed information about CVE-2024-42218: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-42218: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-42218: n/a


CVE-2024-42219: n/aCVE-2024-42219 0 1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient. HighVulnerabilityUnited StatesCanadaUnited Kingdom+7#cve #cve-2024-42219 Join the discussion	CVE Database V5	08/06/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:24 UTC
CVE-2024-42218: n/aCVE-2024-42218 0 1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms. MediumVulnerabilityUnited StatesCanadaUnited Kingdom+7#cve #cve-2024-42218 Join the discussion	CVE Database V5	08/06/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:24 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional