Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

dnsdist

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure.

CVE-2026-24028 is a vulnerability identified in PowerDNS DNSdist, a DNS load balancer and firewall product, specifically affecting versions 1.9.0 and 2.0.0. The issue arises from an out-of-bounds read triggered by specially crafted DNS response packets when custom Lua scripts utilize the newDNSPacketOverlay API to parse DNS packets. This API is designed to facilitate packet inspection and manipulation within DNSdist. The crafted packet causes the Lua code to read memory beyond the intended buffer boundaries, leading to two primary impacts: a crash of the DNSdist process (denial of service) or potential disclosure of unrelated memory contents, which could leak sensitive information. The vulnerability is exploitable remotely without any authentication or user interaction, as it only requires sending a malicious DNS response to the vulnerable DNSdist instance. The CVSS 3.1 base score is 5.3, reflecting a medium severity primarily due to the lack of confidentiality or integrity impact and the requirement for a crafted response packet. No public exploits or active exploitation have been reported as of the publication date. The vulnerability highlights risks in custom Lua scripting environments within DNS infrastructure, emphasizing the need for careful input validation and memory safety when parsing network data.

Detailed information about CVE-2026-24028: Buffer Over-read in PowerDNS DNSdist affecting PowerDNS DNSdist. Get real-time updates, technical details, and mitiga

CVE-2026-24028: Buffer Over-read in PowerDNS DNSdist - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-24028: Buffer Over-read in PowerDNS DNSdist

Threats Tagged 'cve-2026-24028'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-24028'

Lead Pen Test Professional