Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A moderate severity vulnerability (CVE-2024-0553) affects the gnutls packages in Red Hat Enterprise Linux 8.6 Extended Update Support. This issue is an incomplete fix for a previous vulnerability (CVE-2023-5981) in the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic protocols such as SSL, TLS, and DTLS. The vulnerability relates to CWE-203 (Information Exposure Through Discrepancy). Red Hat has released an updated package to address this issue.

The gnutls packages in Red Hat Enterprise Linux 9.2 Extended Update Support contain security vulnerabilities involving incomplete fixes and improper certificate chain validation. Specifically, CVE-2024-0553 is an incomplete fix for a previous vulnerability (CVE-2023-5981), and CVE-2024-0567 concerns acceptance of certificate chains with distributed trust, which could undermine trust validation. Red Hat has issued an update (RHSA-2024:1082) that addresses these issues by improving certificate validation and completing the prior fix. The advisory covers multiple architectures including x86_64, s390x, ppc64le, and aarch64. No known exploits are reported in the wild.

Detailed information about Red Hat Security Advisory: gnutls security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical detail

Red Hat Security Advisory: gnutls security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:1082

https://access.redhat.com/security/updates/classification/#moderate

2258412

2258544

Canonical URL

Red Hat Security Advisory: gnutls security update

A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.

CVE-2024-0567 is a vulnerability identified in GnuTLS version 3.8.0, a widely used open-source library implementing the TLS protocol. The issue arises from improper verification of cryptographic signatures during the validation of certificate chains that involve distributed trust models. Specifically, the vulnerability manifests when the cockpit-certificate-ensure utility, part of the cockpit system management interface that relies on GnuTLS for TLS operations, rejects valid certificate chains due to flawed signature verification logic. This improper validation can be exploited remotely by an unauthenticated attacker to cause a denial of service (DoS) by forcing the system to reject legitimate certificates, thereby disrupting secure communications and management operations. The vulnerability does not allow for confidentiality or integrity breaches but impacts availability by causing service interruptions. The CVSS v3.1 base score is 7.5, reflecting high severity due to network attack vector, no required privileges or user interaction, and a significant impact on availability. No known exploits have been reported in the wild as of the publication date. The flaw highlights the risks associated with complex certificate validation in distributed trust environments and the importance of rigorous cryptographic signature verification in security-critical libraries like GnuTLS.

Detailed information about CVE-2024-0567: Improper Verification of Cryptographic Signature. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-0567: Improper Verification of Cryptographic Signature - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-0567: Improper Verification of Cryptographic Signature


Red Hat Security Advisory: gnutls security updateCVE-2024-0553 0 A moderate severity vulnerability (CVE-2024-0553) affects the gnutls packages in Red Hat Enterprise Linux 8.6 Extended Update Support. This issue is an incomplete fix for a previous vulnerability (CVE-2023-5981) in the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic protocols such as SSL, TLS, and DTLS. The vulnerability relates to CWE-203 (Information Exposure Through Discrepancy). Red Hat has released an updated package to address this issue. MediumVulnerability#gcve #csaf #cve-2024-0553 Join the discussion	GCVE Database	03/05/2024, 08:23:22 UTC Added: 06/02/2026, 21:44:03 UTC
CVE-2024-0567: Improper Verification of Cryptographic SignatureCVE-2024-0567 0 A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack. HighVulnerabilityUnited StatesGermanyFrance+7#cve #cve-2024-0567 Join the discussion	CVE Database V5	01/16/2024, 14:01:59 UTC Added: 06/02/2025, 15:28:31 UTC

Threats Tagged 'cve-2024-0567'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-0567'

Lead Pen Test Professional