Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

Bleeping Computer

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.

CVE-2026-59847 is a vulnerability in libssh where incorrect AES-GCM finalization checks in builds using the OpenSSL backend effectively remove integrity protection. This flaw enables an attacker positioned in the communication path to alter plaintext data without detection. The vulnerability is classified under CWE-1310 and has a CVSS 3.1 vector indicating network attack complexity is high, no privileges or user interaction required, and impacts integrity but not confidentiality or availability. Red Hat has issued a security advisory with updated libssh packages to remediate this issue.

Detailed information about A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrit

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection,… (CVE-2026-59847) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-59847: Incorrect Check of Function Return Value in Red Hat Red Hat Enterprise Linux 10

Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2025-55338 is a security vulnerability identified in Microsoft Windows 10 Version 1507 (build 10240.0), specifically related to BitLocker, the full disk encryption feature. The core issue is the missing ability to patch ROM code that underpins BitLocker’s security mechanisms. ROM code, being firmware-level code, is immutable post-manufacture, and in this case, the inability to update or patch it means that any discovered flaws cannot be fixed through software updates. This vulnerability falls under CWE-1310 (Missing Ability to Patch Firmware) and CWE-288 (Authentication Bypass Using an Alternate Path or Channel). The flaw allows an attacker with physical access to the device to bypass BitLocker encryption protections, thereby gaining unauthorized access to encrypted data. The attack vector requires physical access (AV:P), but no privileges or user interaction are needed, making it a direct hardware-level bypass. The CVSS v3.1 base score is 6.1 (medium severity), reflecting high impact on confidentiality and integrity but no impact on availability. No patches or updates are currently available to remediate this vulnerability, and no known exploits have been reported in the wild. The vulnerability is particularly concerning for environments relying on BitLocker for data protection on legacy Windows 10 systems that cannot be upgraded or patched. Since the vulnerability is in ROM code, mitigation options are limited to hardware replacement or system upgrades. This vulnerability highlights the risks of relying on immutable firmware components without patch capabilities, especially in security-critical features like disk encryption.

Detailed information about CVE-2025-55338: Security Feature Bypass in Microsoft Windows 11 Version 25H2 affecting Microsoft Windows 11 Version 25H2. Get real-ti

CVE-2025-55338: Security Feature Bypass in Microsoft Windows 11 Version 25H2 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-55338: CWE-1310: Missing Ability to Patch ROM Code in Microsoft Windows 10 Version 1507


CVE-2026-59847: Incorrect Check of Function Return Value in Red Hat Red Hat Enterprise Linux 10CVE-2026-59847 0 A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection. MediumVulnerability#gcve #osv #ghsa-mq2j-7vq4-77m8 Join the discussion	GCVE Database	07/21/2026, 13:18:18 UTC Added: 07/22/2026, 23:23:13 UTC
CVE-2025-55338: CWE-1310: Missing Ability to Patch ROM Code in Microsoft Windows 10 Version 1507CVE-2025-55338 0 Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. MediumVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2025-55338 #cwe-1310 Join the discussion	CVE Database V5	10/14/2025, 17:00:16 UTC Added: 10/14/2025, 17:16:52 UTC

Threats Tagged 'cwe-1310'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cwe-1310'

Lead Pen Test Professional