Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Check Point Research

Kaspersky Security Blog

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

CVE-2018-8440 is a high-severity elevation of privilege vulnerability affecting multiple versions of Microsoft Windows, including Windows 7 (both 32-bit and x64-based systems with Service Pack 1), Windows Server editions (2008, 2008 R2, 2012, 2012 R2, 2016), Windows 8.1, Windows RT 8.1, and Windows 10. The vulnerability arises from improper handling of calls to the Advanced Local Procedure Call (ALPC) mechanism, a core Windows component responsible for inter-process communication. Specifically, the flaw allows an attacker with limited privileges (low-level privileges) to exploit the ALPC interface to escalate their privileges to SYSTEM level without requiring user interaction. The CVSS v3.1 base score of 7.8 reflects the vulnerability's significant impact on confidentiality, integrity, and availability, with low attack complexity and requiring only low privileges to exploit. Although no known exploits in the wild have been reported, the vulnerability's nature makes it a critical concern for organizations still running affected Windows versions, particularly Windows 7, which has reached end-of-life and no longer receives mainstream support. Exploitation could allow attackers to execute arbitrary code with elevated privileges, potentially leading to full system compromise, unauthorized access to sensitive data, and disruption of services. The vulnerability affects a broad range of Windows operating systems, making it relevant for diverse environments, including enterprise and server infrastructures.

Detailed information about CVE-2018-8440: Elevation of Privilege in Microsoft Windows 7 affecting Microsoft Windows 7. Get real-time updates, technical details,

CVE-2018-8440: Elevation of Privilege in Microsoft Windows 7 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2018-8440: Elevation of Privilege in Microsoft Windows 7

Threats Tagged 'cve-2018-8440'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2018-8440'

Lead Pen Test Professional