Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

golang

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

Red Hat has issued security advisories for the Go Toolset in Red Hat Enterprise Linux 8 addressing two vulnerabilities: CVE-2024-24789, which is an incorrect handling of certain ZIP files in the golang archive/zip package, and CVE-2024-24790, which involves unexpected behavior in the Is methods for IPv4-mapped IPv6 addresses in the golang net/netip package. These issues could lead to incorrect processing of ZIP files and unexpected network address behavior, respectively. The advisories provide updated packages to fix these vulnerabilities. The affected products include Red Hat Enterprise Linux 8 across multiple architectures and related components such as Red Hat OpenShift Serverless clients. Red Hat rates the security impact as moderate and provides detailed update instructions in their advisories.

Detailed information about Red Hat Security Advisory: go-toolset security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical de

Red Hat Security Advisory: go-toolset security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:4237

https://access.redhat.com/security/updates/classification/#moderate

2292668

2292787

RHEL-10069

Canonical URL

https://access.redhat.com/errata/RHSA-2024:4867

https://access.redhat.com/documentation/en-us/red_hat_openshift_serverless/1

2296266

CVE-2024-24789 Mishandling of corrupt central directory record in archive/zip - VEX

Microsoft Support Lifecycle

Common Vulnerability Scoring System

Golang: Mishandling of corrupt central directory record in archive/zip (CVE-2024-24789)

Threats Tagged 'bit-golang-2024-24789'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'bit-golang-2024-24789'

Lead Pen Test Professional