Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX handler that has its nonce verification commented out, allowing unauthenticated attackers to generate valid Zoom SDK signatures for any meeting ID and retrieve the site's Zoom SDK key.

CVE-2026-1368 is a vulnerability classified under CWE-287 (Improper Authentication) found in the Video Conferencing with Zoom WordPress plugin prior to version 4.6.6. The root cause is that an AJAX handler responsible for generating Zoom SDK signatures has its nonce verification mechanism commented out, effectively disabling a critical authentication step. Nonces in WordPress are used to protect against CSRF and ensure that requests come from legitimate users. Without this verification, unauthenticated attackers can invoke the AJAX endpoint to generate valid Zoom SDK signatures for any meeting ID of their choosing. Additionally, attackers can retrieve the site's Zoom SDK key, which is a sensitive credential used to authenticate Zoom SDK requests. Possession of these credentials allows attackers to impersonate legitimate meetings, potentially joining or manipulating meetings without authorization, or creating forged meeting sessions that appear authentic. This undermines the confidentiality and integrity of video conferencing sessions. The vulnerability does not require user interaction or authentication, making exploitation straightforward for remote attackers. Although no public exploits have been reported yet, the presence of such a flaw in a widely used plugin poses a significant risk. The plugin is commonly used by organizations to embed Zoom meetings within WordPress sites, making the attack surface broad. The lack of a CVSS score indicates that the vulnerability is newly published and not yet fully assessed, but the technical details suggest a serious authentication bypass issue.

Detailed information about CVE-2026-1368: CWE-287 Improper Authentication in Video Conferencing with Zoom affecting null Video Conferencing with Zoom. Get real-

CVE-2026-1368: CWE-287 Improper Authentication in Video Conferencing with Zoom - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-1368: CWE-287 Improper Authentication in Video Conferencing with Zoom

Threats Tagged 'cve-2026-1368'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-1368'

Lead Pen Test Professional