Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

operations-analytics-log-analysis

IBM Operations Analytics - Log Analysis  and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.

IBM Operations Analytics - Log Analysis and IBM SmartCloud Analytics - Log Analysis contain a vulnerability where default passwords embedded during manufacturing are used during installation. This use of default credentials (CWE-1392) can allow an attacker to bypass authentication controls. The vulnerability affects several versions from 1.3.2.0 to 1.3.8.4. The CVSS v3.1 base score is 8.4, with attack vector local, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation must be managed by the user.

Detailed information about CVE-2026-7365: CWE-1392 Use of Default Credentials in IBM Operations Analytics - Log Analysis affecting IBM Operations Analytics - Lo

CVE-2026-7365: CWE-1392 Use of Default Credentials in IBM Operations Analytics - Log Analysis - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-7365: CWE-1392 Use of Default Credentials in IBM Operations Analytics - Log Analysis

CVE-2024-40685 is a medium-severity Cross-Site Request Forgery (CSRF) vulnerability affecting IBM Operations Analytics – Log Analysis versions 1.3.5.0 through 1.3.8.3 and IBM SmartCloud Analytics – Log Analysis. This vulnerability allows an attacker to trick an authenticated user into performing unauthorized actions without their consent. Exploitation requires user interaction but no prior authentication or elevated privileges. The vulnerability impacts the integrity of the system by enabling unauthorized changes but does not affect confidentiality or availability.

CVE-2024-40685 is a Cross-Site Request Forgery (CSRF) vulnerability identified in IBM Operations Analytics – Log Analysis versions 1.3.5.0 through 1.3.8.3 and IBM SmartCloud Analytics – Log Analysis. CSRF vulnerabilities exploit the trust a web application places in an authenticated user’s browser by tricking the user into submitting unauthorized requests, often via malicious links or web pages. In this case, an attacker can craft a request that, when executed by a logged-in user, causes the application to perform unintended actions without the user's knowledge or consent. The vulnerability does not require the attacker to have any privileges or prior authentication, but it does require the victim to interact with a malicious link or page (user interaction). The CVSS 3.1 base score is 4.3 (medium), reflecting that the attack vector is network-based with low attack complexity, no privileges required, but user interaction is necessary. The impact is limited to integrity, meaning unauthorized changes could be made, but confidentiality and availability are not affected. No public exploits or active exploitation have been reported to date. The lack of patches at the time of reporting suggests that IBM or users should monitor for updates. The vulnerability is categorized under CWE-352, which is a common web security weakness related to CSRF. This vulnerability could be leveraged to manipulate analytics configurations or data, potentially undermining operational insights or triggering erroneous alerts.

Detailed information about CVE-2024-40685: CWE-352 Cross-Site Request Forgery (CSRF) in IBM Operations Analytics - Log Analysis affecting IBM Operations Analyti

CVE-2024-40685: CWE-352 Cross-Site Request Forgery (CSRF) in IBM Operations Analytics - Log Analysis - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-40685: CWE-352 Cross-Site Request Forgery (CSRF) in IBM Operations Analytics - Log Analysis


CVE-2026-7365: CWE-1392 Use of Default Credentials in IBM Operations Analytics - Log AnalysisCVE-2026-7365 0 IBM Operations Analytics - Log Analysis and IBM SmartCloud Analytics - Log Analysis uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication. HighVulnerability#cve #cve-2026-7365 #cwe-1392 Join the discussion	CVE Database V5	05/27/2026, 13:55:22 UTC Added: 05/27/2026, 14:04:14 UTC
CVE-2024-40685: CWE-352 Cross-Site Request Forgery (CSRF) in IBM Operations Analytics - Log AnalysisCVE-2024-40685 0 CVE-2024-40685 is a medium-severity Cross-Site Request Forgery (CSRF) vulnerability affecting IBM Operations Analytics – Log Analysis versions 1.3.5.0 through 1.3.8.3 and IBM SmartCloud Analytics – Log Analysis. This vulnerability allows an attacker to trick an authenticated user into performing unauthorized actions without their consent. Exploitation requires user interaction but no prior authentication or elevated privileges. The vulnerability impacts the integrity of the system by enabling unauthorized changes but does not affect confidentiality or availability. MediumVulnerabilityGermanyFranceNetherlands+3#cve #cve-2024-40685 #cwe-352 Join the discussion	CVE Database V5	02/04/2026, 21:12:46 UTC Added: 02/04/2026, 21:30:10 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional