Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

l8w8jwt

l8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel.

CVE-2024-25190 identifies a critical security vulnerability in the l8w8jwt library version 2.2.1, which is used for JSON Web Token (JWT) authentication. The vulnerability arises because the library uses the standard memcmp function to verify authentication tokens. memcmp is not a constant-time comparison function, meaning the time it takes to compare two inputs can vary depending on how many bytes match before a difference is found. This timing discrepancy creates a side channel that attackers can exploit to perform timing attacks, gradually deducing valid authentication tokens byte-by-byte by measuring response times. Such an attack can effectively bypass authentication mechanisms without needing valid credentials or user interaction. The CVSS v3.1 score of 9.8 reflects the vulnerability's critical nature, with network attack vector, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. The vulnerability is categorized under CWE-203 (Information Exposure Through Discrepancy). No official patches have been released at the time of this report, and no known exploits have been observed in the wild yet. However, the vulnerability's characteristics make it highly exploitable in practice, especially in environments where l8w8jwt is used to secure APIs or services. Organizations relying on this library should urgently review their authentication implementations and consider mitigation steps until an official fix is available.

Detailed information about CVE-2024-25190: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-25190: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-25190: n/a

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional