Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope other than the one they are assigned to.

CVE-2024-22021 is an access control vulnerability affecting Veeam Recovery Orchestrator version 6. The issue allows users assigned the Plan Author role, which is intended to have limited privileges, to retrieve recovery plans from scopes they are not authorized to access. This occurs due to insufficient enforcement of scope-based access restrictions within the application. The vulnerability is classified under CWE-285 (Improper Authorization), indicating that the system fails to properly check user permissions before granting access to sensitive resources. The CVSS v3.0 base score is 6.5, reflecting a medium severity level with a network attack vector, low attack complexity, and requiring low privileges but no user interaction. The impact is primarily on confidentiality, as unauthorized users can view recovery plans that may contain sensitive information about backup and disaster recovery configurations. There is no impact on integrity or availability. No public exploits or patches are currently available, but the vulnerability has been publicly disclosed since February 2024. Organizations relying on Veeam Recovery Orchestrator for disaster recovery planning should be aware of this exposure and monitor for vendor updates.

Detailed information about CVE-2024-22021: Vulnerability in Veeam Recovery Orchestrator affecting Veeam Recovery Orchestrator. Get real-time updates, technical 

CVE-2024-22021: Vulnerability in Veeam Recovery Orchestrator - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-22021: Vulnerability in Veeam Recovery Orchestrator

Threats Tagged 'cve-2024-22021'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-22021'

Lead Pen Test Professional