Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Compress-Raw-Zlib

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.

Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for CVE-2026-27171.

CVE-2026-3381 identifies a critical security vulnerability in the Perl module Compress::Raw::Zlib, specifically in versions up to 2.219. This module bundles its own copy of the zlib compression library, which in these versions is outdated and contains multiple security flaws. The vulnerability is categorized under CWE-1395, indicating a dependency on a vulnerable third-party component. The affected zlib versions have been found to have serious security issues, including those addressed in CVE-2026-27171, which was uncovered during a 7ASecurity audit. The vulnerability allows an unauthenticated attacker to remotely exploit the compression functionality, potentially leading to full compromise of confidentiality, integrity, and availability of systems using the module. The CVSS v3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges required, and no user interaction needed. The scope is unchanged, but the impact on confidentiality, integrity, and availability is high. The fix is incorporated in Compress::Raw::Zlib version 2.220, which updates the embedded zlib library to version 1.3.2, remediating the identified issues. No public exploits have been reported yet, but the severity and ease of exploitation make this a critical threat for any Perl-based applications relying on this module for compression tasks.

Detailed information about CVE-2026-3381: CWE-1395 Dependency on Vulnerable Third-Party Component in PMQS Compress::Raw::Zlib affecting PMQS Compress::Raw::Zlib

CVE-2026-3381: CWE-1395 Dependency on Vulnerable Third-Party Component in PMQS Compress::Raw::Zlib - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3381: CWE-1395 Dependency on Vulnerable Third-Party Component in PMQS Compress::Raw::Zlib

Threats Tagged 'cve-2026-3381'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-3381'

Lead Pen Test Professional