Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A moderate severity vulnerability (CVE-2024-0553) affects the gnutls packages in Red Hat Enterprise Linux 8.6 Extended Update Support. This issue is an incomplete fix for a previous vulnerability (CVE-2023-5981) in the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic protocols such as SSL, TLS, and DTLS. The vulnerability relates to CWE-203 (Information Exposure Through Discrepancy). Red Hat has released an updated package to address this issue.

The gnutls packages in Red Hat Enterprise Linux 9.2 Extended Update Support contain security vulnerabilities involving incomplete fixes and improper certificate chain validation. Specifically, CVE-2024-0553 is an incomplete fix for a previous vulnerability (CVE-2023-5981), and CVE-2024-0567 concerns acceptance of certificate chains with distributed trust, which could undermine trust validation. Red Hat has issued an update (RHSA-2024:1082) that addresses these issues by improving certificate validation and completing the prior fix. The advisory covers multiple architectures including x86_64, s390x, ppc64le, and aarch64. No known exploits are reported in the wild.

Detailed information about Red Hat Security Advisory: gnutls security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical detail

Red Hat Security Advisory: gnutls security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:1082

https://access.redhat.com/security/updates/classification/#moderate

2258412

2258544

Canonical URL

Red Hat Security Advisory: gnutls security update

gnutls

A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.

CVE-2024-0553 is a timing side-channel vulnerability discovered in GnuTLS version 3.8.0, specifically within the RSA-PSK ClientKeyExchange implementation. The vulnerability stems from observable discrepancies in response times when the system processes malformed ciphertexts versus ciphertexts with correct PKCS#1 v1.5 padding during the RSA-PSK key exchange. This timing difference can be measured remotely by an attacker to perform a side-channel attack, potentially allowing them to recover sensitive cryptographic material such as private keys or session keys. The flaw is a continuation or incomplete fix of the previously identified CVE-2023-5981, indicating that the underlying issue with timing leakage was not fully resolved. The attack vector requires no privileges or user interaction and can be executed over a network, making it accessible to remote attackers. While no active exploits have been reported, the vulnerability's CVSS score of 7.5 reflects its high severity due to the potential confidentiality impact. The vulnerability affects systems using GnuTLS 3.8.0 with RSA-PSK key exchange enabled, which is commonly used in secure communications protocols. The timing side-channel attack leverages subtle differences in cryptographic operation durations to infer protected data, a known class of cryptographic vulnerabilities that can undermine the security guarantees of TLS implementations.

Detailed information about CVE-2024-0553: Observable Discrepancy. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-0553: Observable Discrepancy - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-0553: Observable Discrepancy


Red Hat Security Advisory: gnutls security updateCVE-2024-0553 0 A moderate severity vulnerability (CVE-2024-0553) affects the gnutls packages in Red Hat Enterprise Linux 8.6 Extended Update Support. This issue is an incomplete fix for a previous vulnerability (CVE-2023-5981) in the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic protocols such as SSL, TLS, and DTLS. The vulnerability relates to CWE-203 (Information Exposure Through Discrepancy). Red Hat has released an updated package to address this issue. MediumVulnerability#gcve #csaf #cve-2024-0553 Join the discussion	GCVE Database	03/05/2024, 08:23:22 UTC Added: 06/02/2026, 21:44:03 UTC
CVE-2024-0553: Observable DiscrepancyCVE-2024-0553 0 A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981. HighVulnerabilityUnited StatesGermanyFrance+9#cve #cve-2024-0553 Join the discussion	CVE Database V5	01/16/2024, 11:40:50 UTC Added: 11/20/2025, 18:22:04 UTC

Threats Tagged 'cve-2024-0553'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-0553'

Lead Pen Test Professional