Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Implementations of IPMI Authenticated sessions does not provide enough randomness to protect from session hijacking, allowing an attacker to use either predictable IPMI Session ID or weak BMC Random Number to bypass security controls using spoofed IPMI packets to manage BMC device.

CVE-2024-3411 is a critical security vulnerability affecting Dell's Integrated Dell Remote Access Controller version 8 (iDRAC8), specifically version 2.86.86.86. The vulnerability stems from insufficient entropy in the implementation of IPMI (Intelligent Platform Management Interface) authenticated sessions. IPMI is widely used for out-of-band management of servers, allowing administrators to remotely monitor, manage, and recover systems independently of the host operating system. The flaw involves the generation of predictable IPMI session IDs and weak random numbers by the Baseboard Management Controller (BMC), which is responsible for hardware-level management. Due to this insufficient randomness, an attacker can hijack an active IPMI session or spoof IPMI packets to bypass security controls without needing authentication or user interaction. This enables unauthorized remote management of the BMC, potentially allowing attackers to manipulate hardware settings, reboot servers, or extract sensitive information. The vulnerability has a CVSS 3.1 base score of 9.1, reflecting its critical nature with network attack vector, low attack complexity, no privileges required, and no user interaction needed. While no public exploits have been reported yet, the vulnerability's characteristics make it highly exploitable in practice. The lack of patch links suggests that a fix may not yet be publicly available, emphasizing the need for immediate mitigations. This vulnerability is classified under CWE-331 (Insufficient Entropy), highlighting the cryptographic weakness in random number generation critical for session security.

Detailed information about CVE-2024-3411: CWE-331 Insufficient Entropy in Dell iDRAC8 affecting Dell iDRAC8. Get real-time updates, technical details, and mitig

CVE-2024-3411: CWE-331 Insufficient Entropy in Dell iDRAC8 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-3411: CWE-331 Insufficient Entropy in Dell iDRAC8

Threats Tagged 'cve-2024-3411'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-3411'

Lead Pen Test Professional