Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

snowflake-jdbc

A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manipulation of the argument nonProxyHosts can lead to inefficient regular expression complexity. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 5fb0a8a318a2ed87f4022a1f56e742424ba94052. A patch should be applied to remediate this issue.

The vulnerability identified as CVE-2026-3293 affects the snowflake-jdbc library, specifically versions 4.0.0 and 4.0.1. The issue resides in the SdkProxyRoutePlanner class within the JDBC URL Handler component, where the nonProxyHosts argument is processed using regular expressions. Due to inefficient regular expression complexity, an attacker with local access and limited privileges can craft input that triggers excessive backtracking or resource consumption during regex evaluation. This results in a potential denial of service through performance degradation. The vulnerability does not require network access or user interaction, but local execution privileges are necessary. The flaw does not compromise data confidentiality or integrity but impacts availability by slowing or halting the affected process. The vulnerability has a CVSS 4.8 (medium) score, reflecting its limited attack vector and impact. A patch identified by commit 5fb0a8a318a2ed87f4022a1f56e742424ba94052 has been released by snowflakedb to remediate this issue. No known exploits have been observed in the wild, but the exploit code is publicly available, increasing the risk of local attacks if systems remain unpatched.

Detailed information about CVE-2026-3293: Inefficient Regular Expression Complexity in snowflakedb snowflake-jdbc affecting snowflakedb snowflake-jdbc. Get real

CVE-2026-3293: Inefficient Regular Expression Complexity in snowflakedb snowflake-jdbc - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3293: Inefficient Regular Expression Complexity in snowflakedb snowflake-jdbc

Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection provided by client side encryption.

CVE-2024-43382 identifies a security vulnerability in the Snowflake JDBC driver versions 3.2.6 through 3.19.1, where an incorrect security setting leads to data being uploaded to an encrypted stage without the intended client-side encryption protection. Snowflake stages are storage locations used for loading and unloading data, and encrypted stages provide an additional security layer by encrypting data client-side before transmission. The vulnerability stems from a misconfiguration or flaw in the driver that disables or bypasses this client-side encryption, causing data to be transmitted in a less secure manner despite the stage being encrypted. This flaw compromises the confidentiality and integrity of data in transit and at rest on the stage, as the data is not protected by the stronger client-side encryption layer. The CVSS 3.1 score of 5.9 (medium severity) reflects that exploitation requires network access and high privileges (PR:H), but no user interaction is needed, and the attack complexity is high (AC:H). The scope is unchanged (S:U), but the impact on confidentiality and integrity is high (C:H/I:H), with no impact on availability (A:N). No public exploits have been reported yet, but the vulnerability poses a risk to organizations relying on Snowflake for secure data handling. The CWE-326 classification indicates the root cause is an incorrect implementation of cryptographic controls. This vulnerability highlights the importance of proper configuration and validation of encryption mechanisms in data transfer components like JDBC drivers.

Detailed information about CVE-2024-43382: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-43382: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-43382: n/a


CVE-2026-3293: Inefficient Regular Expression Complexity in snowflakedb snowflake-jdbcCVE-2026-3293 0 A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manipulation of the argument nonProxyHosts can lead to inefficient regular expression complexity. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 5fb0a8a318a2ed87f4022a1f56e742424ba94052. A patch should be applied to remediate this issue. MediumVulnerabilityUnited StatesCanadaUnited Kingdom+7#cve #cve-2026-3293 Join the discussion	CVE Database V5	02/27/2026, 05:32:09 UTC Added: 02/27/2026, 05:41:10 UTC
CVE-2024-43382: n/aCVE-2024-43382 0 Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection provided by client side encryption. MediumVulnerabilityUnited StatesCanadaUnited Kingdom+8#cve #cve-2024-43382 Join the discussion	CVE Database V5	10/30/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:46 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional