Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat Integration - Service Registry 2.5.11 GA includes multiple security fixes addressing denial of service, memory leaks, and resource allocation issues in underlying components such as commons-compress, vert.x, and netty-codec-http. These vulnerabilities could lead to service disruption or resource exhaustion. The update is rated with a moderate security impact by Red Hat Product Security. No CVSS scores are provided in the advisory. The update is available as container images from the Red Hat Container Catalog.

This security advisory covers Red Hat Integration - Service Registry version 2.5.11 GA, which addresses five security vulnerabilities: CVE-2024-25710 (denial of service via infinite loop in commons-compress when processing corrupted DUMP files), CVE-2024-1023 (memory leak in vert.x due to Netty FastThreadLocal usage), CVE-2024-1300 (memory leak in vert.x when TCP server is configured with TLS and SNI), CVE-2024-26308 (OutOfMemoryError unpacking broken Pack200 files in commons-compress), and CVE-2024-29025 (resource allocation without limits or throttling in netty-codec-http). These issues could cause denial of service or resource exhaustion. The advisory does not provide CVSS scores but classifies the impact as moderate. The update is delivered as container image updates and requires applying this update along with any previously released errata.

Detailed information about Red Hat Security Advisory: Service Registry (container images) release and security update [2.5.11 GA] affecting Red Hat Product Secu

Red Hat Security Advisory: Service Registry (container images) release and security update [2.5.11 GA] - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:1662

https://access.redhat.com/security/updates/classification/#important

https://access.redhat.com/documentation/en-us/red_hat_build_of_quarkus/3.2/

https://access.redhat.com/articles/4966181

2260840

2263139

2264988

2264989

2265158

2266523

2266690

QUARKUS-4022

QUARKUS-4036

QUARKUS-4097

QUARKUS-4103

QUARKUS-4104

QUARKUS-4106

Canonical URL

https://access.redhat.com/errata/RHSA-2024:2833

https://access.redhat.com/documentation/en-us/red_hat_build_of_apicurio_registry/2.5

https://access.redhat.com/security/updates/classification/#moderate

2272907

Red Hat Security Advisory: Service Registry (container images) release and security update [2.5.11 GA]

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk.

This vulnerability involves the inadvertent exposure of git credentials in Quarkus projects during continuous integration builds. It requires three conditions: presence of a token in the Git URL, use of a Quarkus extension generating Kubernetes descriptors, and automatic publication of these descriptors as build artifacts. Because all three conditions must be met, exploitation chances are limited. The issue is tracked as CVE-2024-1979 with a CVSS v3.1 base score of 3.5 (low severity). Red Hat has released a security update in Quarkus 3.2.11 that addresses this and other vulnerabilities. Users are advised to ensure at least one of the preconditions is not present to mitigate risk.

Detailed information about CVE-2024-1979: Exposure of Sensitive Information to an Unauthorized Actor. Get real-time updates, technical details, and mitigation s

CVE-2024-1979: Exposure of Sensitive Information to an Unauthorized Actor - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-1979: Exposure of Sensitive Information to an Unauthorized Actor


Red Hat Security Advisory: Service Registry (container images) release and security update [2.5.11 GA]CVE-2024-1023 0 Red Hat Integration - Service Registry 2.5.11 GA includes multiple security fixes addressing denial of service, memory leaks, and resource allocation issues in underlying components such as commons-compress, vert.x, and netty-codec-http. These vulnerabilities could lead to service disruption or resource exhaustion. The update is rated with a moderate security impact by Red Hat Product Security. No CVSS scores are provided in the advisory. The update is available as container images from the Red Hat Container Catalog. MediumVulnerability#gcve #csaf #cve-2024-1023 Join the discussion	GCVE Database	05/14/2024, 09:07:52 UTC Added: 06/01/2026, 21:15:21 UTC
CVE-2024-1979: Exposure of Sensitive Information to an Unauthorized ActorCVE-2024-1979 0 A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk. LowVulnerability#cve #cve-2024-1979 Join the discussion	CVE Database V5	03/13/2024, 09:41:25 UTC Added: 11/20/2025, 18:33:17 UTC

Threats Tagged 'cve-2024-1979'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-1979'

Lead Pen Test Professional