Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

GCP Compute Engine Security

JVN Japan

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their operating systems, and relevant configuration data stored within them. Discovery also identifies and reports more detailed facts for some versions of key Red Hat packages and products that it finds in the network.

A flaw in Emacs allows arbitrary code execution via unsafe macro expansion when a user opens an untrusted Emacs Lisp source code file. This is triggered if the user has elisp-completion-at-point configured or automatic error checking enabled (e.g., Flymake or Flycheck). An attacker must trick the user into opening a maliciously crafted Emacs Lisp file containing a harmful macro definition. The vulnerability is identified as CWE-94 (Improper Control of Generation of Code) and can lead to execution of unauthorized code, compromising confidentiality, integrity, and availability. Red Hat rates this vulnerability as moderate severity, with a CVSS 3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No known exploits in the wild have been reported. Mitigation includes not opening untrusted Emacs Lisp files and disabling the auto-completion and error checking features when handling such files.

Detailed information about Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage affecting Red Hat Product S

Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:11487

https://access.redhat.com/security/cve/CVE-2024-53920

https://access.redhat.com/security/cve/CVE-2025-25724

https://access.redhat.com/security/cve/CVE-2025-3576

https://access.redhat.com/security/cve/CVE-2025-4802

https://access.redhat.com/security/cve/CVE-2025-5702

https://access.redhat.com/security/cve/CVE-2025-6020

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery

Canonical URL

Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

emacs

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

CVE-2024-53920 is a vulnerability identified in the elisp-mode.el component of GNU Emacs versions prior to 30.1. The flaw occurs when a user invokes the elisp-completion-at-point function or enables on-the-fly diagnosis features that byte-compile Emacs Lisp source code from untrusted origins. These actions cause unsafe macro expansions within the Lisp interpreter, which can be exploited by attackers to execute arbitrary code on the victim's system. The vulnerability is classified under CWE-94 (Improper Control of Generation of Code), indicating that untrusted input is improperly handled, leading to code injection risks. The CVSS v3.1 score of 7.8 (high) reflects the vulnerability's significant impact on confidentiality, integrity, and availability, with an attack vector requiring local access (AV:L), low attack complexity (AC:L), no privileges required (PR:N), but user interaction (UI:R). The scope is unchanged (S:U), meaning the impact is confined to the vulnerable component's privileges. Although no exploits are known in the wild, the risk is substantial for users who open or interact with untrusted Emacs Lisp code. This vulnerability is particularly relevant for developers and researchers who use Emacs for Lisp development and may inadvertently process malicious code. The lack of a patch link suggests that users should upgrade to Emacs 30.1 or later, where this issue is resolved. The vulnerability underscores the risks of executing or processing untrusted code in extensible editors like Emacs.

Detailed information about CVE-2024-53920: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-53920: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-53920: n/a


Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usageCVE-2024-53920 0 Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their operating systems, and relevant configuration data stored within them. Discovery also identifies and reports more detailed facts for some versions of key Red Hat packages and products that it finds in the network. HighVulnerability#gcve #csaf #cve-2024-53920 Join the discussion	GCVE Database	07/21/2025, 19:25:21 UTC Added: 06/02/2026, 21:43:35 UTC
CVE-2024-53920: n/aCVE-2024-53920 0 In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.) HighVulnerabilityGermanyFranceUnited Kingdom+2#cve #cve-2024-53920 Join the discussion	CVE Database V5	11/27/2024, 00:00:00 UTC Added: 11/03/2025, 20:55:36 UTC

Threats Tagged 'cve-2024-53920'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-53920'

Lead Pen Test Professional