Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

CIRCL OSINT Feed

ThreatFox MISP Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

elasticsearch

commons-httpclient

httpcomponents-client

Multiple security issues in the commons-httpclient package, specifically in versions including 4.5.14-2.1 and others, have been addressed in an update included in openSUSE Tumbleweed. The vulnerabilities relate to the HttpClient based on the classic I/O model failing to correctly release underlying connections back to the connection manager under certain conditions. The severity is assessed as medium with no known exploits reported in the wild.

The vulnerability identified as CVE-2026-64607 affects the commons-httpclient library, where the HttpClient implementation based on the classic I/O model does not properly release connections back to the connection manager if certain conditions are encountered. This can lead to resource exhaustion or denial of service. Multiple versions of the package are affected, including various builds and distributions such as openSUSE and Ubuntu. The issues have been fixed in the httpcomponents-client-4.5.14-2.1 package update included in openSUSE Tumbleweed. No active exploitation has been reported.

Detailed information about Security fixes in elasticsearch 9.5.2-r1 (CVE-2026-64607) affecting null elasticsearch. Get real-time updates, technical details, and

Security fixes in elasticsearch 9.5.2-r1 (CVE-2026-64607) - Live Threat Intelligence - Threat Radar | OffSeq.com

SUSE ratings

URL of this CSAF notice

SUSE CVE CVE-2026-64607 page

Commons httpclient: HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an… (CVE-2026-64607)

Threats Tagged 'cleanstart-2026-nw99656'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cleanstart-2026-nw99656'

Lead Pen Test Professional