Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

linux-azure

linux-aws-hwe

linux-gcp

linux-hwe

linux-hwe-edge

linux-oracle

linux

linux-aws

linux-aws-5.0

linux-aws-5.3

linux-aws-5.4

linux-azure-4.15

linux-azure-5.3

linux-azure-5.4

linux-azure-edge

linux-gcp-4.15

linux-gcp-5.3

linux-gcp-5.4

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-hwe-5.4

linux-ibm-5.4

linux-kvm

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-oracle-5.4

linux-raspi-5.4

linux-aws-fips

linux-azure-fips

linux-fips

linux-gcp-fips

linux-aws-5.11

linux-aws-5.13

linux-aws-5.15

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.15

linux-azure-5.8

linux-azure-fde

linux-azure-fde-5.15

linux-bluefield

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.15

linux-gcp-5.8

linux-gke

linux-gke-5.15

linux-gkeop

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.15

linux-hwe-5.8

linux-ibm

linux-ibm-5.15

linux-intel-5.13

linux-intel-iotg-5.15

linux-iot

linux-lowlatency-hwe-5.15

linux-nvidia-tegra-5.15

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.15

linux-oracle-5.8

linux-raspi

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.15

linux-riscv-5.8

linux-xilinx-zynqmp

A vulnerability in the Linux kernel's Thunderbolt property handling was resolved, where an integer overflow in tb_property_entry_valid() allowed a malicious XDomain peer to bypass validation checks. This flaw could lead to reading memory beyond intended bounds, potentially leaking kernel memory contents via sysfs attributes. The issue affects Linux Azure kernel versions prior to certain 7.0.0 builds. A patch is available to fix this vulnerability.

The Linux kernel's Thunderbolt subsystem had a vulnerability (CVE-2026-63893) caused by an unchecked 32-bit unsigned integer wrap in tb_property_entry_valid(). Specifically, entry->value (u32) and entry->length (u16) are summed in u32, which can wrap around and bypass the block length check. This allows tb_property_parse() to pass an attacker-controlled offset to parse_dwdata(), reading memory beyond the allocated property block. For TEXT-typed entries with keys "deviceid" or "vendorid", this results in leaking kernel memory via sysfs device_name/vendor_name attributes. The leak is NUL-terminated and untargeted. The fix uses check_add_overflow() to prevent the wrap. The vulnerability affects Linux Azure kernel versions before 7.0.0-28.28~24.04.1 and similar builds. The CVSS v3.1 score is 8.1 (high severity) with network attack vector, low complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity impact, and high availability impact. Vendor advisories from Ubuntu confirm the patch availability and recommend updating to fixed versions.

Detailed information about In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() entry->value… (CVE-2026-63893) - Live Threat Intelligence - Threat Radar | OffSeq.com

Linux azure: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() entry->value… (CVE-2026-63893)

Threats Tagged 'cve-2026-63893'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-63893'

Lead Pen Test Professional