Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

webkit2gtk3

Multiple security vulnerabilities have been identified in WebKitGTK, the GTK port of the WebKit web rendering engine, affecting Red Hat Enterprise Linux 9. These include address bar spoofing, cross-origin data exfiltration, unexpected process crashes, memory corruption, and potential arbitrary code execution triggered by processing malicious web content or files. Red Hat has issued an important security update (RHSA-2024:9553) addressing these issues. The update is available for various Red Hat Enterprise Linux 9 variants and architectures.

This advisory covers several security flaws in WebKitGTK, including CVE-2024-27856 which allows processing a file to cause unexpected application termination or arbitrary code execution. Other vulnerabilities include address bar spoofing (CVE-2024-40866), cross-origin data exfiltration (CVE-2024-44187), process crashes from crafted web content (CVE-2024-44185, CVE-2024-44244), and memory corruption (CVE-2024-54534). These issues arise from improper handling of malicious web content or files in the web rendering engine. Red Hat has released updated webkit2gtk3 packages for Red Hat Enterprise Linux 9 to mitigate these risks.

Detailed information about Red Hat Security Advisory: webkit2gtk3 security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical d

Red Hat Security Advisory: webkit2gtk3 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:9553

https://access.redhat.com/security/updates/classification/#important

2312724

2314706

2323263

2323278

2333846

2344618

Canonical URL

Red Hat Security Advisory: webkit2gtk3 security update

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin.

CVE-2024-44187 is a cross-origin vulnerability in Apple Safari browsers stemming from improper handling of iframe elements' security origins. Specifically, the browser failed to correctly track and enforce origin boundaries, allowing a malicious website to bypass the same-origin policy and exfiltrate data from other origins loaded within iframes. This vulnerability affects Safari versions prior to 18 on platforms including iOS, iPadOS, macOS Sequoia, tvOS, visionOS, and watchOS. The issue was addressed by improving the tracking of security origins in Safari 18 and corresponding OS updates. The vulnerability is classified under CWE-346, which relates to improper authorization. According to the CVSS 3.1 vector (6.5 medium severity), the attack vector is network-based, requires no privileges, but does require user interaction (such as visiting a malicious website). The impact is primarily on confidentiality, with no direct effect on integrity or availability. No public exploits have been reported yet, but the flaw could be leveraged by attackers to steal sensitive information from cross-origin iframes, potentially exposing user data from other websites or services open in the browser. This vulnerability highlights the critical importance of strict enforcement of same-origin policies in web browsers to prevent data leakage.

Detailed information about CVE-2024-44187: A malicious website may exfiltrate data cross-origin in Apple macOS affecting Apple macOS. Get real-time updates, tec

CVE-2024-44187: A malicious website may exfiltrate data cross-origin in Apple macOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-44187: A malicious website may exfiltrate data cross-origin in Apple Safari


Red Hat Security Advisory: webkit2gtk3 security updateCVE-2024-27856 0 Multiple security vulnerabilities have been identified in WebKitGTK, the GTK port of the WebKit web rendering engine, affecting Red Hat Enterprise Linux 9. These include address bar spoofing, cross-origin data exfiltration, unexpected process crashes, memory corruption, and potential arbitrary code execution triggered by processing malicious web content or files. Red Hat has issued an important security update (RHSA-2024:9553) addressing these issues. The update is available for various Red Hat Enterprise Linux 9 variants and architectures. HighVulnerability#gcve #csaf #cve-2024-27856 Join the discussion	GCVE Database	11/13/2024, 15:29:19 UTC Added: 06/28/2026, 22:14:19 UTC
CVE-2024-44187: A malicious website may exfiltrate data cross-origin in Apple SafariCVE-2024-44187 0 A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin. MediumVulnerabilityUnited StatesCanadaUnited Kingdom+12#cve #cve-2024-44187 Join the discussion	CVE Database V5	09/16/2024, 23:23:16 UTC Added: 11/03/2025, 22:16:01 UTC

Threats Tagged 'cve-2024-44187'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-44187'

Lead Pen Test Professional