Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

wpa_supplicant

The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.

CVE-2023-52160 is a vulnerability in the PEAP (Protected Extensible Authentication Protocol) implementation within wpa_supplicant, a widely used supplicant for managing Wi-Fi authentication on Linux and other platforms. The flaw arises when wpa_supplicant is configured to bypass verification of the network's TLS certificate during Phase 1 of PEAP authentication. Under these conditions, an attacker can exploit an eap_peap_decrypt vulnerability by sending a crafted EAP-TLV Success packet instead of initiating Phase 2 authentication. This manipulation allows the attacker to bypass the second phase of authentication, which normally verifies user credentials, effectively enabling authentication bypass. The attacker can impersonate legitimate Enterprise Wi-Fi networks, potentially gaining unauthorized network access. The vulnerability does not require privileges or user interaction, but depends on insecure client configuration (disabling TLS certificate verification). The CVSS score is 6.5 (medium severity), reflecting the network attack vector, low attack complexity, no privileges required, but requiring user interaction (e.g., connecting to a rogue access point). The vulnerability impacts confidentiality by allowing unauthorized network access but does not affect integrity or availability directly. No patches are currently linked, and no known exploits are reported in the wild, but the risk remains significant for misconfigured clients.

Detailed information about CVE-2023-52160: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-52160: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-52160: n/a

Threats Tagged 'cve-2023-52160'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-52160'

Lead Pen Test Professional