Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

microcode_ctl

Red Hat has released a security update for the microcode_ctl package addressing three vulnerabilities in UEFI firmware related to improper input validation, insufficient access control granularity, and improper initialization in the OutOfBandXML module. These vulnerabilities affect Red Hat Enterprise Linux 9 and its variants. The update is rated as having a moderate security impact. Users are advised to apply the update as detailed in the Red Hat advisory.

The microcode_ctl package, which provides microcode updates for Intel and AMD processors on Red Hat Enterprise Linux 9, contains three vulnerabilities in UEFI firmware: CVE-2024-28047 (improper input validation), CVE-2024-39279 (insufficient granularity of access control), and CVE-2024-31157 (improper initialization in the OutOfBandXML module). These issues could potentially affect the security of the system's firmware update process. Red Hat has issued a security update to address these vulnerabilities.

Detailed information about Red Hat Security Advisory: microcode_ctl security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical

Red Hat Security Advisory: microcode_ctl security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:7043

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index

https://access.redhat.com/security/updates/classification/#moderate

2345363

2345381

2345421

RHEL-67336

Canonical URL

SUSE ratings

URL of this CSAF notice

URL for RHSA-2025:7043

E-Mail link for RHSA-2025:7043

SUSE CVE CVE-2024-28047 page

SUSE CVE CVE-2024-31157 page

SUSE CVE CVE-2024-39279 page

security update for microcode_ctl

Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

CVE-2024-31157 is a medium-severity information disclosure vulnerability identified in the UEFI firmware OutOfBandXML module present in certain Intel processors. The root cause is improper initialization within this firmware component, which may allow a privileged user with local access to potentially disclose sensitive information from the system. The vulnerability does not require user interaction but does require the attacker to have high-level privileges on the affected system, such as administrative or root access. The CVSS 4.0 vector (AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N) indicates that the attack vector is local, with high attack complexity, privileges required, no user interaction, and high impact on confidentiality. There is no impact on integrity or availability. The vulnerability affects the confidentiality of data handled or stored by the UEFI firmware module, which could include sensitive system information or cryptographic keys. No public exploits have been reported yet, and Intel or OEMs have not yet published patches, but affected organizations should monitor for firmware updates. The vulnerability is relevant to systems using Intel processors with the vulnerable UEFI firmware, commonly found in enterprise servers, workstations, and some high-end client devices. Proper mitigation requires firmware updates and strict control over privileged user access to prevent exploitation.

Detailed information about CVE-2024-31157: Information Disclosure in Intel(R) Processors affecting null Intel(R) Processors. Get real-time updates, technical de

CVE-2024-31157: Information Disclosure in Intel(R) Processors - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-31157: Information Disclosure in Intel(R) Processors


security update for microcode_ctlCVE-2024-28047 0 Red Hat has released a security update for the microcode_ctl package addressing three vulnerabilities in UEFI firmware related to improper input validation, insufficient access control granularity, and improper initialization in the OutOfBandXML module. These vulnerabilities affect Red Hat Enterprise Linux 9 and its variants. The update is rated as having a moderate security impact. Users are advised to apply the update as detailed in the Red Hat advisory. MediumVulnerability#gcve #csaf #cve-2024-28047 Join the discussion	GCVE Database	05/13/2025, 00:00:00 UTC Added: 08/06/2026, 18:16:43 UTC
CVE-2024-31157: Information Disclosure in Intel(R) ProcessorsCVE-2024-31157 0 Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2024-31157 Join the discussion	CVE Database V5	02/12/2025, 21:19:34 UTC Added: 11/03/2025, 21:40:26 UTC

Threats Tagged 'cve-2024-31157'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-31157'

Lead Pen Test Professional