Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

IronOS

Integer Overflow or Wraparound vulnerability in Ralim IronOS.This issue affects IronOS: before v2.23-rc2.

CVE-2026-24830 is an integer overflow or wraparound vulnerability identified in Ralim IronOS firmware versions before v2.23-rc2. This vulnerability falls under CWE-190, which involves improper handling of integer operations that can lead to overflow conditions. Such overflows can cause unexpected behavior, including memory corruption, buffer overflows, or logic errors. In the case of IronOS, this flaw can be triggered remotely without any authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The vulnerability allows attackers to execute arbitrary code with full control over the device, compromising confidentiality, integrity, and availability (C:H/I:H/A:H). IronOS is a firmware used in embedded devices, often in IoT or specialized hardware contexts. The lack of authentication and low attack complexity make this vulnerability highly exploitable. Although no public exploits are currently known, the critical CVSS score of 9.8 reflects the potential for severe damage, including device takeover, data exfiltration, or denial of service. The vulnerability was published on January 27, 2026, and no official patches are linked yet, emphasizing the urgency for vendor response and user vigilance.

Detailed information about CVE-2026-24830: CWE-190 Integer Overflow or Wraparound in Ralim IronOS affecting Ralim IronOS. Get real-time updates, technical detai

CVE-2026-24830: CWE-190 Integer Overflow or Wraparound in Ralim IronOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-24830: CWE-190 Integer Overflow or Wraparound in Ralim IronOS

Vulnerability in Ralim IronOS (source/Core/BSP/Pinecilv2/bl_mcu_sdk/components/ble/ble_stack/common/tinycrypt/source modules). This vulnerability is associated with program files ecc_dsa.C.

This issue affects IronOS: before v2.23-rc3.

CVE-2026-24801 identifies a vulnerability in Ralim IronOS, an operating system used primarily in Ralim's Pinecilv2 soldering irons and potentially other embedded devices. The vulnerability is located in the ECC DSA cryptographic implementation within the BLE stack's tinycrypt source modules, specifically in the source/Core/BSP/Pinecilv2/bl_mcu_sdk/components/ble/ble_stack/common/tinycrypt/source modules, affecting versions before v2.23-rc3. The issue is classified under CWE-22, which typically involves improper handling of file paths or directory traversal, suggesting that the cryptographic module may be susceptible to manipulation or unauthorized access to sensitive cryptographic operations or keys. The CVSS 4.0 score of 6.9 (medium severity) reflects that the vulnerability can be exploited remotely (AV:P - physical proximity required), with low attack complexity (AC:L), no privileges required (PR:N), and no user interaction (UI:N). The vulnerability impacts confidentiality and integrity (VC:H, VI:H) but not availability. The scope is high (SC:H), indicating that exploitation could affect components beyond the initially vulnerable module. No known exploits are currently reported in the wild, and no patches are linked yet, but the vendor has released IronOS v2.23-rc3 to address this issue. The vulnerability's presence in cryptographic code raises concerns about the potential for attackers to undermine secure communications or firmware validation processes within affected devices.

Detailed information about CVE-2026-24801: Vulnerability in Ralim IronOS affecting Ralim IronOS. Get real-time updates, technical details, and mitigation strate

CVE-2026-24801: Vulnerability in Ralim IronOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-24801: Vulnerability in Ralim IronOS


CVE-2026-24830: CWE-190 Integer Overflow or Wraparound in Ralim IronOSCVE-2026-24830 0 Integer Overflow or Wraparound vulnerability in Ralim IronOS.This issue affects IronOS: before v2.23-rc2. CriticalVulnerabilityGermanyFranceNetherlands+2#cve #cve-2026-24830 #cwe-190 Join the discussion	CVE Database V5	01/27/2026, 09:28:07 UTC Added: 01/27/2026, 09:50:56 UTC
CVE-2026-24801: Vulnerability in Ralim IronOSCVE-2026-24801 0 Vulnerability in Ralim IronOS (source/Core/BSP/Pinecilv2/bl_mcu_sdk/components/ble/ble_stack/common/tinycrypt/source modules). This vulnerability is associated with program files ecc_dsa.C. This issue affects IronOS: before v2.23-rc3. MediumVulnerabilityUnited StatesGermanyChina+7#cve #cve-2026-24801 Join the discussion	CVE Database V5	01/27/2026, 08:36:25 UTC Added: 01/27/2026, 08:51:12 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional