Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

everest-core

EVerest is an EV charging software stack. Prior to version 2026.02.0, even immediately after CSMS performs a RemoteStop (StopTransaction), the EVSE can return to `PrepareCharging` via the EV's BCB toggle, allowing session restart. This breaks the irreversibility of remote stop and can bypass operational/billing/safety controls. Version 2026.02.0 contains a patch.

CVE-2026-33015 is an authorization bypass vulnerability classified under CWE-863 (Incorrect Authorization) affecting the everest-core component of the EVerest EV charging software stack. EVerest manages electric vehicle charging sessions, including remote control commands from the CSMS. Prior to version 2026.02.0, when the CSMS issues a RemoteStop command (StopTransaction) to terminate a charging session, the EVSE is expected to irreversibly stop the session to enforce operational, billing, and safety policies. However, due to improper authorization checks, the EVSE can revert to the PrepareCharging state triggered by the EV's BCB (Battery Control Box) toggle. This allows the charging session to restart without CSMS consent, effectively bypassing the remote stop command. The vulnerability compromises the integrity of session control, undermining billing accuracy and safety mechanisms designed to prevent unauthorized or unsafe charging. The CVSS 3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L) indicates the attack requires physical proximity (local network or direct EVSE access), has low complexity, no privileges or user interaction, and impacts integrity and availability moderately. No public exploits have been reported, but the flaw poses a risk to EV charging infrastructure reliability and trustworthiness. The vendor patched the issue in version 2026.02.0, correcting the authorization logic to enforce irreversible session termination upon RemoteStop commands.

Detailed information about CVE-2026-33015: CWE-863: Incorrect Authorization in EVerest everest-core affecting EVerest everest-core. Get real-time updates, techn

CVE-2026-33015: CWE-863: Incorrect Authorization in EVerest everest-core - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-33015: CWE-863: Incorrect Authorization in EVerest everest-core

Threats Tagged 'cve-2026-33015'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-33015'

Lead Pen Test Professional