Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

macos

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An attacker may be able to access connected network volumes mounted in the home directory.

CVE-2023-42836 is a logic vulnerability in Apple macOS that allows an attacker to access network volumes mounted within a user's home directory without requiring authentication or user interaction. The root cause is insufficient validation or checks when handling connected network volumes, which could allow an attacker to bypass normal access controls and read data from these mounted shares. The vulnerability affects multiple macOS versions, including Ventura, Sonoma, and Monterey, and has been addressed in updates macOS Ventura 13.6.3, macOS Sonoma 14.1, and macOS Monterey 12.7.2, as well as iOS and iPadOS 17.1. The CVSS v3.1 score is 5.3 (medium), reflecting that the attack vector is network-based with low complexity and no privileges or user interaction required, but the impact is limited to confidentiality loss without affecting integrity or availability. No known exploits have been reported in the wild, indicating that exploitation may require specific conditions or is not yet widespread. The vulnerability is significant because network volumes often contain sensitive organizational data, and unauthorized access could lead to data leakage. The fix involves improved logic checks in the OS to ensure proper access control enforcement on network-mounted volumes within home directories.

Detailed information about CVE-2023-42836: An attacker may be able to access connected network volumes mounted in the home directory in Apple macOS affecting Ap

CVE-2023-42836: An attacker may be able to access connected network volumes mounted in the home directory in Apple macOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-42836: An attacker may be able to access connected network volumes mounted in the home directory in Apple macOS

Threats Tagged 'cve-2023-42836'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-42836'

Lead Pen Test Professional