Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certificates even if the PAN-OS configuration would not normally permit them to do so.

CVE-2026-0228 is a vulnerability classified under CWE-295 (Improper Certificate Validation) affecting Palo Alto Networks Cloud NGFW, specifically in the PAN-OS operating system. The flaw allows Windows Terminal Server Agents to establish connections to PAN-OS devices using expired certificates, circumventing the intended certificate validation mechanisms configured in PAN-OS. This improper validation undermines the trust model of certificate-based authentication, potentially allowing connections that should be rejected under normal security policies. The vulnerability does not require user interaction and can be exploited remotely, but it requires some level of privileges (PR:L) on the attacker’s side, which limits the attack surface. The CVSS v4.0 score is 1.3, indicating low severity, primarily due to the limited impact on confidentiality and integrity (VI:L, VC:N), no impact on availability, and the requirement for privileges. No known exploits have been reported in the wild, and no patches are currently linked, suggesting the issue is either newly disclosed or under vendor review. The vulnerability could be leveraged by attackers to bypass certificate expiration checks, potentially enabling unauthorized access or persistence in environments relying on strict certificate validation for authentication. This flaw highlights the importance of robust certificate validation in network security appliances, especially those used in cloud and hybrid environments.

Detailed information about CVE-2026-0228: CWE-295 Improper Certificate Validation in Palo Alto Networks Cloud NGFW affecting Palo Alto Networks Cloud NGFW. Get 

CVE-2026-0228: CWE-295 Improper Certificate Validation in Palo Alto Networks Cloud NGFW - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-0228: CWE-295 Improper Certificate Validation in Palo Alto Networks Cloud NGFW

Threats Tagged 'cve-2026-0228'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-0228'

Lead Pen Test Professional