Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

textream

Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server imposes no limit on concurrent connections. Combined with a broadcast timer that sends state to all connected clients every 100 ms, an attacker can exhaust CPU and memory by flooding the server with connections, causing the Textream application to freeze and crash during a live session. Version 1.5.1 fixes the issue.

CVE-2026-28412 is an uncontrolled resource consumption vulnerability (CWE-400) affecting Textream, a free teleprompter application for macOS. The flaw exists in the DirectorServer WebSocket server component, which prior to version 1.5.1, imposes no restrictions on the number of concurrent client connections. The server uses a broadcast timer that sends state updates to all connected clients every 100 milliseconds. An attacker can exploit this by opening a large number of WebSocket connections simultaneously, causing the server to repeatedly send state data to an excessive number of clients. This results in rapid exhaustion of CPU and memory resources on the host system. The resource exhaustion leads to the Textream application freezing or crashing, particularly disruptive during live teleprompter sessions. The vulnerability requires no privileges or authentication but does require the attacker to initiate multiple WebSocket connections, which involves user interaction. The CVSS v3.1 base score is 6.5 (medium), reflecting the high impact on availability but no impact on confidentiality or integrity. The issue is resolved in Textream version 1.5.1 by implementing limits on concurrent WebSocket connections, preventing resource exhaustion. No known exploits are reported in the wild as of the publication date.

Detailed information about CVE-2026-28412: CWE-400: Uncontrolled Resource Consumption in textream affecting null textream. Get real-time updates, technical deta

CVE-2026-28412: CWE-400: Uncontrolled Resource Consumption in textream - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-28412: CWE-400: Uncontrolled Resource Consumption in textream

Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server (`ws://127.0.0.1:<httpPort+1>`) accepts connections from any origin without validating the HTTP `Origin` header during the WebSocket handshake. A malicious web page visited in the same browser session can silently connect to the local WebSocket server and send arbitrary `DirectorCommand` payloads, allowing full remote control of the teleprompter content. Version 1.5.1 fixes the issue.

CVE-2026-28403 is an origin validation error categorized under CWE-346 affecting the Textream teleprompter application for macOS. The vulnerability exists in the DirectorServer WebSocket server component, which listens on a local loopback address (ws://127.0.0.1:<httpPort+1>). Prior to version 1.5.1, this WebSocket server fails to validate the HTTP Origin header during the WebSocket handshake process. The Origin header is a critical security control that ensures only trusted web pages can establish WebSocket connections. Without this validation, any malicious web page opened in the same browser session can silently connect to the local WebSocket server. Once connected, the attacker can send arbitrary DirectorCommand payloads, which control the teleprompter content remotely. This could allow manipulation or disruption of the teleprompter's displayed text, potentially causing misinformation or operational disruption during presentations or broadcasts. The vulnerability does not require any authentication or elevated privileges, but exploitation requires the user to visit a malicious web page, making user interaction necessary. The CVSS v3.1 base score is 7.6 (high), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and significant impact on integrity and some impact on confidentiality and availability. The issue was publicly disclosed and fixed in Textream version 1.5.1, which implements proper Origin header validation to restrict WebSocket connections to trusted sources only.

Detailed information about CVE-2026-28403: CWE-346: Origin Validation Error in textream affecting null textream. Get real-time updates, technical details, and m

CVE-2026-28403: CWE-346: Origin Validation Error in textream - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-28403: CWE-346: Origin Validation Error in textream


CVE-2026-28412: CWE-400: Uncontrolled Resource Consumption in textreamCVE-2026-28412 0 Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server imposes no limit on concurrent connections. Combined with a broadcast timer that sends state to all connected clients every 100 ms, an attacker can exhaust CPU and memory by flooding the server with connections, causing the Textream application to freeze and crash during a live session. Version 1.5.1 fixes the issue. MediumVulnerabilityUnited StatesCanadaUnited Kingdom+7#cve #cve-2026-28412 #cwe-400 Join the discussion	CVE Database V5	03/02/2026, 15:46:56 UTC Added: 03/02/2026, 16:11:13 UTC
CVE-2026-28403: CWE-346: Origin Validation Error in textreamCVE-2026-28403 0 Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server (`ws://127.0.0.1:<httpPort+1>`) accepts connections from any origin without validating the HTTP `Origin` header during the WebSocket handshake. A malicious web page visited in the same browser session can silently connect to the local WebSocket server and send arbitrary `DirectorCommand` payloads, allowing full remote control of the teleprompter content. Version 1.5.1 fixes the issue. HighVulnerabilityUnited StatesCanadaUnited Kingdom+7#cve #cve-2026-28403 #cwe-346 Join the discussion	CVE Database V5	03/02/2026, 15:45:18 UTC Added: 03/02/2026, 16:11:13 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional