Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to disclose kernel memory.

CVE-2023-40410 is a security vulnerability discovered in Apple’s iOS, iPadOS, macOS, watchOS, and tvOS platforms. The issue stems from an out-of-bounds read condition caused by insufficient input validation in the kernel, which could allow a malicious or compromised app to read kernel memory that it should not have access to. Kernel memory disclosure can reveal sensitive information such as kernel pointers, cryptographic keys, or other critical data that could be leveraged to bypass security mechanisms or escalate privileges. The vulnerability affects multiple Apple operating systems, including iOS 17, iPadOS 17, macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, watchOS 10, and tvOS 17. Apple has addressed the issue by improving input validation in the kernel, thereby preventing out-of-bounds reads. There are currently no known exploits in the wild, indicating that attackers have not yet publicly leveraged this vulnerability. Exploitation requires an app to be installed and executed on the device, but does not require user interaction beyond app installation and execution. This vulnerability is significant because kernel memory disclosure can be a stepping stone for more severe attacks such as privilege escalation or persistent compromise. The lack of a CVSS score necessitates an independent severity assessment based on the impact on confidentiality, ease of exploitation, and scope of affected systems.

Detailed information about CVE-2023-40410: An app may be able to disclose kernel memory in Apple iOS and iPadOS affecting Apple iOS and iPadOS. Get real-time up

CVE-2023-40410: An app may be able to disclose kernel memory in Apple iOS and iPadOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-40410: An app may be able to disclose kernel memory in Apple iOS and iPadOS

Threats Tagged 'cve-2023-40410'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-40410'

Lead Pen Test Professional