Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Package harbor-registry-fips version 2.7.1-r0 fixes 3 vulnerabilities: CVE-2025-29923, CVE-2025-61727, CVE-2025-61729

The go-redis client library for Go versions prior to 9.5.5, 9.6.3, and 9.7.2 has an improper input validation issue (CWE-20) that can cause out-of-order responses when the CLIENT SETINFO command times out during connection establishment. This occurs if the client is configured to send its identity and experiences network connectivity problems or aggressive timeouts. For sticky connections, this results in persistent out-of-order responses for the connection's lifetime, and all pipelined commands receive incorrect responses. When using the default connection pool, at most one out-of-order response occurs before the connection is discarded. The vulnerability is addressed in versions 9.5.5, 9.6.3, and 9.7.2 (with 9.7.3 as the lowest available patched 9.7.x version). A recommended workaround is to disable client identity transmission by setting DisableIdentity to true during client construction.

Detailed information about go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment affecting Microsoft 

go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-29923 go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment - VEX

Microsoft Support Lifecycle

Common Vulnerability Scoring System

Security fixes in harbor-registry-fips 2.7.1-r0 (CVE-2025-29923)

grafana

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

This vulnerability in Grafana OSS involves an authorization bypass in the provisioning contact points API. Specifically, users assigned the Editor role can modify protected webhook URLs without possessing the necessary alert.notifications.receivers.protected:write permission. The issue affects several versions of Grafana OSS, including 11.6.9, 12.1.5, 12.2.2, and 12.3.1. The CVSS 3.1 base score is 5.4, indicating a medium severity level. There are no known exploits in the wild, and no official patch or remediation details have been provided in the available data.

Detailed information about CVE-2026-21724: Vulnerability in Grafana Grafana OSS affecting Grafana Grafana OSS. Get real-time updates, technical details, and mit

CVE-2026-21724: Vulnerability in Grafana Grafana OSS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-21724: Vulnerability in Grafana Grafana OSS


Security fixes in harbor-registry-fips 2.7.1-r0 (CVE-2025-29923)CVE-2025-29923 0 Package harbor-registry-fips version 2.7.1-r0 fixes 3 vulnerabilities: CVE-2025-29923, CVE-2025-61727, CVE-2025-61729 LowVulnerability#gcve #csaf #cve-2025-29923 Join the discussion	GCVE Database	07/30/2026, 07:10:53 UTC Added: 06/03/2026, 21:10:38 UTC
CVE-2026-21724: Vulnerability in Grafana Grafana OSSCVE-2026-21724 0 A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission. MediumVulnerability#cve #cve-2026-21724 #gcve Join the discussion	CVE Database V5	03/26/2026, 20:06:18 UTC Added: 03/26/2026, 21:29:48 UTC

Threats Tagged 'cve-2026-21724'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-21724'

Lead Pen Test Professional