Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

AIX ist ein Unix Betriebssystem von IBM.
IBM Virtual I/O Server (VIOS) bietet Virtualisierungsfunktionen.

This advisory covers two PostgreSQL vulnerabilities fixed in Red Hat Enterprise Linux 9.4 Extended Update Support. CVE-2025-12817 is a privilege check bypass where the CREATE STATISTICS command fails to verify schema CREATE privileges, potentially allowing unauthorized statistics creation. CVE-2025-12818 is an integer wraparound issue in libpq that causes undersized memory allocations, which could lead to memory corruption or related issues. Red Hat has released updated PostgreSQL packages (version 13.23-1.el9_4) addressing these flaws.

Detailed information about Red Hat Security Advisory: postgresql security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical de

Red Hat Security Advisory: postgresql security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:0262

https://access.redhat.com/security/updates/classification/#moderate

2414825

2414826

Canonical URL

Reference

WID-SEC-W-2026-2858 - CSAF Version

WID-SEC-2026-2858 - Portal Version

IBM AIX und VIOS: Mehrere Schwachstellen

libwww-perl

CVE-2026-8368 is a vulnerability in OALDERS LWP::UserAgent versions before 6.83 for Perl where Authorization and Proxy-Authorization headers are leaked during cross-origin redirects. The redirect handler fails to strip these sensitive headers on 3xx responses, sending them unchanged to the redirect target, which can be an attacker-controlled host. This results in disclosure of the caller's credentials. The vulnerability has a medium severity with a CVSS score of 6.5. No patch or official remediation has been confirmed yet.

LWP::UserAgent versions prior to 6.83 for Perl improperly handle HTTP 3xx redirects by not removing Authorization and Proxy-Authorization headers before following the redirect. While the redirect handler removes Host and Cookie headers, it leaves these sensitive authentication headers intact, allowing them to be sent to potentially malicious redirect destinations. This behavior can lead to credential leakage if the redirect points to an attacker-controlled host. The vulnerability is classified under CWE-522 (Insufficiently Protected Credentials) and has a CVSS 3.1 base score of 6.5, indicating a medium severity network attack vector with low attack complexity and no user interaction required.

Detailed information about CVE-2026-8368: CWE-522 Insufficiently Protected Credentials in OALDERS LWP::UserAgent affecting OALDERS LWP::UserAgent. Get real-time

CVE-2026-8368: CWE-522 Insufficiently Protected Credentials in OALDERS LWP::UserAgent - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-8368: CWE-522 Insufficiently Protected Credentials in OALDERS LWP::UserAgent


IBM AIX und VIOS: Mehrere SchwachstellenCVE-2025-12817 0 AIX ist ein Unix Betriebssystem von IBM. IBM Virtual I/O Server (VIOS) bietet Virtualisierungsfunktionen. MediumVulnerability#gcve #csaf #cve-2025-12817 Join the discussion	GCVE Database	08/16/2026, 22:00:00 UTC Added: 06/25/2026, 21:46:52 UTC
CVE-2026-8368: CWE-522 Insufficiently Protected Credentials in OALDERS LWP::UserAgentCVE-2026-8368 0 CVE-2026-8368 is a vulnerability in OALDERS LWP::UserAgent versions before 6.83 for Perl where Authorization and Proxy-Authorization headers are leaked during cross-origin redirects. The redirect handler fails to strip these sensitive headers on 3xx responses, sending them unchanged to the redirect target, which can be an attacker-controlled host. This results in disclosure of the caller's credentials. The vulnerability has a medium severity with a CVSS score of 6.5. No patch or official remediation has been confirmed yet. MediumVulnerability#cve #cve-2026-8368 #cwe-522 Join the discussion	CVE Database V5	05/12/2026, 14:01:25 UTC Added: 05/12/2026, 15:06:31 UTC

Threats Tagged 'cve-2026-8368'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-8368'

Lead Pen Test Professional