Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

firefox

thunderbird

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.

CVE-2024-6608 is a vulnerability identified in Mozilla Firefox and Thunderbird prior to version 128, involving the pointerlock API. Pointerlock is a web API that allows web applications to capture and control the mouse pointer, typically used in immersive web applications like games or 3D environments. The vulnerability arises because it was possible for an iframe—an embedded frame within a webpage—to use pointerlock to move the cursor beyond the confines of the viewport and even outside the Firefox application window. This behavior is unintended and can cause the cursor to move in ways that confuse the user or interfere with normal interaction. The vulnerability does not allow for direct compromise of confidentiality or integrity but can impact availability or user control by causing unexpected cursor behavior. Exploitation requires no privileges and no authentication but does require user interaction, such as visiting a malicious webpage containing the iframe. The CVSS v3.1 base score is 4.3 (medium), with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L, indicating network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, and low availability impact. There are no known exploits in the wild at the time of publication. The vulnerability affects all Firefox and Thunderbird versions prior to 128, which are widely used across many organizations and individuals worldwide. Mozilla has not yet published a patch link, but users are advised to update to version 128 or later once available. The issue highlights the risks of iframe content controlling pointerlock and suggests a need for stricter controls on pointerlock usage within embedded frames.

Detailed information about CVE-2024-6608: Vulnerability in Mozilla Firefox affecting Mozilla Firefox. Get real-time updates, technical details, and mitigation s

CVE-2024-6608: Vulnerability in Mozilla Firefox - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-6608: Vulnerability in Mozilla Firefox

Threats Tagged 'cve-2024-6608'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-6608'

Lead Pen Test Professional