Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

secure-login

The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to easily brute-force the 2FA PIN via the plugins/servlet/twofactor/public/pinvalidation endpoint. The last 30 and the next 30 tokens are valid.

CVE-2024-48942 is a severe vulnerability affecting the Syracom Secure Login two-factor authentication plugin integrated with Atlassian products Jira, Confluence, and Bitbucket up to version 3.1.4.5. The vulnerability exists because the plugin's validation endpoint (/plugins/servlet/twofactor/public/pinvalidation) accepts a large token window, specifically the last 30 and the next 30 tokens, as valid. This design flaw drastically reduces the security of the 2FA mechanism, allowing remote attackers to perform brute-force attacks against the 2FA PIN without any authentication or user interaction. The attack vector is network-based, requiring only access to the vulnerable endpoint. The weakness corresponds to CWE-799 (Improper Control of Interaction Frequency), indicating insufficient rate limiting or token validation controls. Exploiting this vulnerability enables attackers to bypass 2FA protections, compromising user accounts and potentially gaining unauthorized access to sensitive project management, development, and collaboration data hosted on Atlassian platforms. The CVSS 3.1 base score of 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) highlights the critical nature of this flaw, emphasizing its ease of exploitation and severe impact on confidentiality and integrity. No patches or mitigations have been officially released at the time of publication, and no active exploitation has been reported, but the risk remains high due to the widespread use of these Atlassian products in enterprise environments.

Detailed information about CVE-2024-48942: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-48942: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48942: n/a

The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to bypass 2FA by interacting with the /rest endpoint of Jira, Confluence, or Bitbucket. In the default configuration, /rest is allowlisted.

CVE-2024-48941 is a critical security vulnerability affecting the Syracom Secure Login (2FA) plugin for Atlassian products Jira, Confluence, and Bitbucket, specifically versions through 3.1.4.5. The vulnerability arises because the plugin’s two-factor authentication mechanism can be bypassed remotely by interacting with the /rest API endpoint of these products. By default, this /rest endpoint is allowlisted, meaning it is accessible without additional authentication checks, which attackers can exploit to circumvent the 2FA protection. This bypass allows unauthorized remote attackers to gain access to user accounts without providing valid credentials or completing the second authentication factor. The vulnerability is classified under CWE-266, which relates to improper access control. The CVSS v3.1 base score is 9.1 (critical), with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality and integrity. Although no public exploits have been reported yet, the severity and ease of exploitation make this a significant threat. The vulnerability affects organizations using the Syracom Secure Login plugin integrated with Atlassian collaboration tools, which are widely used in enterprise environments for project management and software development. The lack of a patch at the time of disclosure means that mitigation must focus on configuration changes and access restrictions until an official fix is released.

Detailed information about CVE-2024-48941: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-48941: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48941: n/a


CVE-2024-48942: n/aCVE-2024-48942 0 The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to easily brute-force the 2FA PIN via the plugins/servlet/twofactor/public/pinvalidation endpoint. The last 30 and the next 30 tokens are valid. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+9#cve #cve-2024-48942 Join the discussion	CVE Database V5	10/09/2024, 00:00:00 UTC Added: 02/25/2026, 21:37:00 UTC
CVE-2024-48941: n/aCVE-2024-48941 0 The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to bypass 2FA by interacting with the /rest endpoint of Jira, Confluence, or Bitbucket. In the default configuration, /rest is allowlisted. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-48941 Join the discussion	CVE Database V5	10/09/2024, 00:00:00 UTC Added: 02/25/2026, 21:37:00 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional