Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

volcano

Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod that can reach the webhook endpoint may send an arbitrarily large request body, potentially causing the webhook server to be killed by OOM. All Volcano deployments with the webhook server exposed to in-cluster traffic are affected. This vulnerability is fixed in v1.14.2, v1.13.3, and v1.12.4.

The Volcano webhook server prior to versions 1.14.2, 1.13.3, and 1.12.4 does not enforce size limits on HTTP request bodies. This lack of control allows an attacker with in-cluster pod access to send very large requests to the webhook endpoint, leading to uncontrolled resource consumption and potential out-of-memory (OOM) termination of the webhook server process. This vulnerability is categorized under CWE-400 (Uncontrolled Resource Consumption) and CWE-770 (Allocation of Resources Without Limits or Throttling). The vulnerability affects all deployments exposing the webhook server to in-cluster traffic. The issue is resolved in the specified fixed versions.

Detailed information about CVE-2026-44247: CWE-400: Uncontrolled Resource Consumption in volcano-sh volcano affecting volcano-sh volcano. Get real-time updates,

CVE-2026-44247: CWE-400: Uncontrolled Resource Consumption in volcano-sh volcano - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-44247: CWE-400: Uncontrolled Resource Consumption in volcano-sh volcano

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

CVE-2024-36533 is a critical security vulnerability identified in volcano version 1.8.2, a component commonly used in cloud-native and container orchestration environments. The root cause of the vulnerability is insecure permissions that allow unauthorized attackers to obtain the service account's token. This token typically grants access to sensitive data and elevated privileges within the system. Because the vulnerability requires no authentication (PR:N) and no user interaction (UI:N), it can be exploited remotely with low attack complexity (AC:L). The vulnerability affects confidentiality, integrity, and availability (C:H/I:H/A:H), making it highly impactful. The CVSS vector indicates that an attacker can fully compromise the system by leveraging this token to escalate privileges and access sensitive resources. The vulnerability is categorized under CWE-1259, which involves improper permissions leading to unauthorized access. Although no known exploits are currently reported in the wild, the critical severity and ease of exploitation make it a significant threat. No official patches have been linked yet, so organizations must rely on configuration changes and monitoring to mitigate risk. Given volcano's role in cloud-native infrastructure, exploitation could lead to widespread compromise of containerized applications and services.

Detailed information about CVE-2024-36533: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-36533: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-36533: n/a


CVE-2026-44247: CWE-400: Uncontrolled Resource Consumption in volcano-sh volcanoCVE-2026-44247 0 Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod that can reach the webhook endpoint may send an arbitrarily large request body, potentially causing the webhook server to be killed by OOM. All Volcano deployments with the webhook server exposed to in-cluster traffic are affected. This vulnerability is fixed in v1.14.2, v1.13.3, and v1.12.4. MediumVulnerability#cve #cve-2026-44247 #cwe-400 Join the discussion	CVE Database V5	05/27/2026, 20:56:47 UTC Added: 05/28/2026, 19:53:12 UTC
CVE-2024-36533: n/aCVE-2024-36533 0 Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. CriticalVulnerabilityUnited StatesGermanyJapan+8#cve #cve-2024-36533 Join the discussion	CVE Database V5	07/24/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:47 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional