Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

objectscale

Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability in the Fabric Syslog. An unauthenticated attacker with remote access could potentially exploit this vulnerability to intercept and modify information in transit.

CVE-2026-22274 is a vulnerability classified under CWE-319, indicating the cleartext transmission of sensitive information. It affects Dell ObjectScale versions prior to 4.2.0.0 and Dell ECS versions 3.8.1.0 through 3.8.1.7. The flaw resides in the Fabric Syslog component, which transmits log data without encryption, exposing sensitive information to interception by unauthenticated remote attackers. Because the transmission is unencrypted, attackers positioned on the network path can perform man-in-the-middle attacks to capture or alter syslog data, potentially gaining insights into system operations or manipulating logs to cover malicious activities. The vulnerability requires no authentication or user interaction, increasing its exploitability. The CVSS 3.1 base score of 6.5 reflects a medium severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Although no public exploits have been reported, the risk remains due to the sensitivity of the data transmitted and the potential for attackers to leverage intercepted information for further compromise. The vulnerability affects enterprise storage environments relying on Dell ObjectScale and ECS, which are used for scalable object storage solutions in cloud and data center infrastructures.

Detailed information about CVE-2026-22274: CWE-319: Cleartext Transmission of Sensitive Information in Dell ObjectScale affecting Dell ObjectScale. Get real-tim

CVE-2026-22274: CWE-319: Cleartext Transmission of Sensitive Information in Dell ObjectScale - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-22274: CWE-319: Cleartext Transmission of Sensitive Information in Dell ObjectScale

Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-22273 is a vulnerability categorized under CWE-1392, which involves the use of default credentials in Dell's ObjectScale and ECS storage platforms. Specifically, Dell ECS versions 3.8.1.0 through 3.8.1.7 and ObjectScale versions prior to 4.2.0.0 ship with default credentials that have not been changed or properly secured. This security flaw allows a remote attacker with low privileges to authenticate using these default credentials and subsequently escalate their privileges within the system. The vulnerability is remotely exploitable without user interaction and requires low attack complexity, making it a significant risk. The CVSS v3.1 base score of 8.8 reflects the high impact on confidentiality, integrity, and availability, as an attacker could gain administrative control over the storage environment. While no public exploits have been reported yet, the presence of default credentials is a well-known attack vector frequently targeted by threat actors. The vulnerability affects critical storage infrastructure used by enterprises for object storage and cloud-native applications, potentially exposing sensitive data and disrupting services. The lack of available patches at the time of reporting necessitates immediate compensating controls to mitigate risk.

Detailed information about CVE-2026-22273: CWE-1392: Use of Default Credentials in Dell ObjectScale affecting Dell ObjectScale. Get real-time updates, technical

CVE-2026-22273: CWE-1392: Use of Default Credentials in Dell ObjectScale - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-22273: CWE-1392: Use of Default Credentials in Dell ObjectScale


CVE-2026-22274: CWE-319: Cleartext Transmission of Sensitive Information in Dell ObjectScaleCVE-2026-22274 0 Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability in the Fabric Syslog. An unauthenticated attacker with remote access could potentially exploit this vulnerability to intercept and modify information in transit. MediumVulnerabilityGermanyUnited KingdomFrance+3#cve #cve-2026-22274 #cwe-319 Join the discussion	CVE Database V5	01/23/2026, 09:25:04 UTC Added: 01/23/2026, 15:36:20 UTC
CVE-2026-22273: CWE-1392: Use of Default Credentials in Dell ObjectScaleCVE-2026-22273 0 Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. HighVulnerabilityUnited StatesGermanyUnited Kingdom+8#cve #cve-2026-22273 #cwe-1392 Join the discussion	CVE Database V5	01/23/2026, 09:14:38 UTC Added: 01/23/2026, 09:21:20 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional