Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions. Join the discussion | CVE Database V5 | 09/11/2026, 12:28:49 UTC Added: 09/11/2026, 12:47:22 UTC |
0 CVE-2026-9089 is a high-severity vulnerability in ConnectWise Automate Agent prior to version 2026.5. The agent does not fully verify the authenticity of components downloaded during plugin loading and self-update processes, which could allow an attacker to execute malicious code. This issue is addressed in Automate version 2026.5. The vulnerability has a CVSS score of 8.8, indicating a significant risk of confidentiality, integrity, and availability impact. No known exploits are reported in the wild at this time. Join the discussion | CVE Database V5 | 05/21/2026, 14:32:14 UTC Added: 05/21/2026, 15:59:46 UTC |
0 ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center where certain client-to-server communications could occur without transport-layer encryption. This could allow network‑based interception of Solution Center traffic in Automate deployments. The issue has been resolved in Automate 2026.4 by enforcing secure communication for affected Solution Center connections. Join the discussion | CVE Database V5 | 04/20/2026, 15:26:31 UTC Added: 04/20/2026, 15:46:16 UTC |
0 In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the encryption method used to obfuscate some communications over the HTTP channel is updated in the Automate 2025.9 patch to enforce HTTPS for all agent communications. Join the discussion | CVE Database V5 | 10/16/2025, 18:59:35 UTC Added: 10/16/2025, 19:14:04 UTC |
Showing 1 to 4 of 4 results