Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

postcss

This update includes the following RPMs:

prometheus3.13:
  * prometheus3.13-3.13.2-0.2.hum1 (aarch64, x86_64)
  * prometheus3.13-3.13.2-0.2.hum1.src (src)

Security Fix(es):

prometheus3.13:
  * CVE-2026-69153

This vulnerability (CVE-2026-69153) in PostCSS arises from improper handling of the sourceMappingURL when the 'from' parameter is unset, leading to a path traversal that exposes source-map files (.map) containing source code paths and content. The issue affects Red Hat Hardened Images RPMs, including prometheus3.5 versions before 3.5.5-0.7.hum1. Red Hat classifies the impact as Moderate because the attacker cannot read arbitrary files beyond source maps. Exploitation requires the application to process attacker-controlled CSS on the server side. The recommended mitigation is to disable source map auto-loading by passing map: false to PostCSS, which prevents the vulnerability but disables source map support. No official patch is currently provided for the affected Red Hat Hardened Images RPMs, and users should refer to Red Hat advisories for updates.

Detailed information about PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset

PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset (CVE-2026-69153) - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:50070

https://access.redhat.com/security/cve/CVE-2026-69153

https://access.redhat.com/security/updates/classification/

https://images.redhat.com/

Canonical URL

https://access.redhat.com/errata/RHSA-2026:50287

https://access.redhat.com/security/cve/CVE-2026-73086

https://access.redhat.com/security/cve/CVE-2026-72815

https://access.redhat.com/security/cve/CVE-2026-73646

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment.

CVE-2023-44270 is a vulnerability discovered in PostCSS, a widely used tool for transforming CSS with JavaScript plugins, affecting versions before 8.4.31. The issue arises when PostCSS parses external CSS that is untrusted, specifically when the CSS is crafted so that parts of it are interpreted as comments by PostCSS. However, after processing, these parts are erroneously included in the output as active CSS nodes, such as rules or properties, rather than remaining inert comments. This parsing anomaly can be exploited by an attacker to inject or manipulate CSS rules in the output, potentially leading to unintended styling effects or security issues such as CSS injection attacks. The vulnerability mainly impacts linters or other tools that use PostCSS to parse CSS from untrusted sources, which may be part of automated build or continuous integration pipelines. There are no known exploits in the wild at the time of publication, and no CVSS score has been assigned yet. The vulnerability does not require authentication or user interaction, but exploitation depends on the ability to supply crafted CSS to the affected PostCSS processing environment. The scope is limited to environments that parse external CSS with vulnerable PostCSS versions, which is common in modern web development workflows.

Detailed information about CVE-2023-44270: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-44270: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-44270: n/a


Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateCVE-2026-69153 0 This update includes the following RPMs: prometheus3.13: * prometheus3.13-3.13.2-0.2.hum1 (aarch64, x86_64) * prometheus3.13-3.13.2-0.2.hum1.src (src) Security Fix(es): prometheus3.13: * CVE-2026-69153 HighVulnerability#gcve #osv #ghsa-fxqj-rqcc-2cmp Join the discussion	GCVE Database	08/04/2026, 16:47:41 UTC Added: 08/03/2026, 21:21:40 UTC
CVE-2023-44270: n/aCVE-2023-44270 0 An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment. UnknownVulnerabilityGermanyFranceUnited Kingdom+2#cve #cve-2023-44270 Join the discussion	CVE Database V5	09/29/2023, 00:00:00 UTC Added: 11/03/2025, 22:01:25 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional