Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

workstation

A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the "Fixed version" column of the 'Response Matrix'

CVE-2026-22722 is a vulnerability identified in VMware Workstation version 17.0 running on Windows-based hosts. The issue is classified as a CWE-476 NULL Pointer Dereference, which occurs when the software attempts to access or dereference a pointer that has a null value, leading to a crash or denial of service condition. An attacker with authenticated user privileges on the host system can trigger this flaw without requiring additional user interaction. The vulnerability does not expose sensitive data or allow privilege escalation but can cause the VMware Workstation application to crash, impacting availability. The CVSS v3.1 base score is 6.1, indicating a medium severity level, with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H, meaning local attack vector, low attack complexity, requires privileges, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. While no exploits have been reported in the wild, the vulnerability poses a risk to environments where VMware Workstation is used for virtualization on Windows hosts. VMware has released patches to address this issue, and users are advised to apply them promptly. The flaw highlights the importance of robust pointer handling in virtualization software to prevent denial of service conditions that could disrupt business operations.

Detailed information about CVE-2026-22722: CWE-476 NULL Pointer Dereference in VMware Workstation affecting VMware Workstation. Get real-time updates, technical

CVE-2026-22722: CWE-476 NULL Pointer Dereference in VMware Workstation - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-22722: CWE-476 NULL Pointer Dereference in VMware Workstation

VMWare Workstation and Fusion contain a logic flaw in the management of network packets. 

Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's. 

Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1

CVE-2026-22715 is a vulnerability identified in VMware Workstation and Fusion, specifically affecting version 17.0. The root cause is a logic flaw in how network packets are managed within the virtualization environment. This flaw allows a malicious actor who has already obtained administrative privileges on a Guest VM to interfere with the network traffic of other Guest VMs running on the same physical host. The attacker could intercept or interrupt network connections, thereby compromising the integrity and availability of inter-VM communications. The vulnerability does not directly expose confidential data but can disrupt services or enable further attacks by manipulating network traffic. Exploitation requires administrative privileges on a Guest VM, making the attack complexity high, and no user interaction is necessary. The CVSS v3.1 base score is 5.9, reflecting medium severity with the vector AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L. VMware has addressed this issue in version 25H2U1 of Workstation and Fusion. No public exploits or active exploitation have been reported to date. The vulnerability is classified under CWE-923, which relates to improper control of network packet processing logic.

Detailed information about CVE-2026-22715: Vulnerability in VMware Workstation affecting VMware Workstation. Get real-time updates, technical details, and mitig

CVE-2026-22715: Vulnerability in VMware Workstation - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-22715: Vulnerability in VMware Workstation


CVE-2026-22722: CWE-476 NULL Pointer Dereference in VMware WorkstationCVE-2026-22722 0 A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Remediate CVE-2026-22722, apply the patches listed in the "Fixed version" column of the 'Response Matrix' MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2026-22722 #cwe-476 Join the discussion	CVE Database V5	02/26/2026, 18:35:20 UTC Added: 02/26/2026, 19:40:40 UTC
CVE-2026-22715: Vulnerability in VMware WorkstationCVE-2026-22715 0 VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's. Resolution: To remediate CVE-2026-22715 please upgrade to VMware Workstation or Fusion Version 25H2U1 MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2026-22715 Join the discussion	CVE Database V5	02/26/2026, 18:29:14 UTC Added: 02/26/2026, 19:40:40 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional