Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, and 4.20

CVE-2025-61729 is a denial of service vulnerability in the golang crypto/x509 package caused by unbounded string concatenation during error string construction in the HostnameError.Error() function. An attacker can supply a specially crafted certificate that triggers excessive resource consumption (CPU, memory, or other platform resources) during processing. This vulnerability affects the Red Hat Trusted Artifact Signer (RHTAS) Operator used with OpenShift Container Platform versions 4.16 to 4.20. The issue is tracked under CWE-1050 (Excessive Platform Resource Consumption within a Loop). Red Hat has not yet released a patch or fix for this vulnerability and is continuing analysis. The vulnerability has a Red Hat CVSS v3 base score of 7.5 with high availability impact but no confidentiality or integrity impact.

Detailed information about Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release affecting Red Hat Product Security Red Hat. Get real

Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:2144

https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3

https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index

https://access.redhat.com/security/cve/CVE-2025-61729

https://access.redhat.com/security/cve/CVE-2025-64756

https://access.redhat.com/security/cve/CVE-2025-66418

https://access.redhat.com/security/cve/CVE-2025-66471

https://access.redhat.com/security/cve/CVE-2025-66506

https://access.redhat.com/security/cve/CVE-2025-66564

https://access.redhat.com/security/cve/CVE-2026-21441

https://access.redhat.com/security/cve/CVE-2026-22772

https://access.redhat.com/security/cve/CVE-2026-22774

https://access.redhat.com/security/cve/CVE-2026-22775

https://access.redhat.com/security/cve/CVE-2026-23745

https://access.redhat.com/security/cve/CVE-2026-23950

https://access.redhat.com/security/updates/classification/

Canonical URL

https://access.redhat.com/errata/RHSA-2026:36796

https://access.redhat.com/security/updates/classification/#important

https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro

https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro

2418462

2445345

2445356

2449833

2455972

2455975

2456333

2456335

2456336

2456338

2456339

2457729

2466505

2466507

2467822

2480680

Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release

devalue

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. From 5.3.0 to 5.6.1, certain inputs can cause devalue.parse to consume excessive CPU time and/or memory, potentially leading to denial of service in systems that parse input from untrusted sources. This affects applications using devalue.parse on externally-supplied data. The root cause is the typed array hydration expecting an ArrayBuffer as input, but not checking the assumption before creating the typed array. This vulnerability is fixed in 5.6.2.

The sveltejs devalue library versions 5.3.0 to 5.6.1 contain an asymmetric resource consumption vulnerability (CWE-405) in the devalue.parse function. When processing certain crafted inputs, the function can consume excessive CPU time and memory due to the typed array hydration expecting an ArrayBuffer input without validating this assumption. This flaw can be exploited to cause denial of service in systems that parse input from untrusted sources. The vulnerability has a CVSS 3.1 base score of 7.5 (high severity) with network attack vector, low attack complexity, no privileges or user interaction required, and impacts availability only. The issue is resolved in version 5.6.2.

Detailed information about CVE-2026-22774: CWE-405: Asymmetric Resource Consumption (Amplification) in sveltejs devalue affecting sveltejs devalue. Get real-tim

CVE-2026-22774: CWE-405: Asymmetric Resource Consumption (Amplification) in sveltejs devalue - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-22774: CWE-405: Asymmetric Resource Consumption (Amplification) in sveltejs devalue


Red Hat Security Advisory: RHTAS 1.3.2 - Red Hat Trusted Artifact Signer ReleaseCVE-2025-61729 0 The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, and 4.20 HighVulnerability#gcve #csaf #cve-2025-61729 Join the discussion	GCVE Database	02/05/2026, 15:45:43 UTC Added: 05/26/2026, 20:58:25 UTC
CVE-2026-22774: CWE-405: Asymmetric Resource Consumption (Amplification) in sveltejs devalueCVE-2026-22774 0 Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. From 5.3.0 to 5.6.1, certain inputs can cause devalue.parse to consume excessive CPU time and/or memory, potentially leading to denial of service in systems that parse input from untrusted sources. This affects applications using devalue.parse on externally-supplied data. The root cause is the typed array hydration expecting an ArrayBuffer as input, but not checking the assumption before creating the typed array. This vulnerability is fixed in 5.6.2. HighVulnerabilityGermanyFranceNetherlands+4#cve #cve-2026-22774 #cwe-405 Join the discussion	CVE Database V5	01/15/2026, 18:53:21 UTC Added: 01/15/2026, 19:08:36 UTC

Threats Tagged 'cve-2026-22774'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-22774'

Lead Pen Test Professional