Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Successful exploitation grants the attacker the ability to deploy resources into any namespace with the elevated permissions of the controller's Service Account, potentially leading to unauthorized access and control over cluster resources.

This vulnerability exists in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management for Kubernetes 2.11. A user on a managed cluster with limited privileges can exploit this flaw by creating a Subscription resource containing specific user-settable annotations. This bypasses intended security controls and escalates the user's privileges to cluster-admin level, allowing deployment of resources across multiple namespaces with the elevated permissions of the controller's Service Account. The vulnerability is classified as CWE-863 (Incorrect Authorization) and has a CVSS v3.1 base score of 9.9, indicating critical severity.

Detailed information about A flaw was found in the multicloud-operators-subscription component. (CVE-2026-66792). Get real-time updates, technical details, and 

A flaw was found in the multicloud-operators-subscription component. (CVE-2026-66792) - Live Threat Intelligence - Threat Radar | OffSeq.com

A flaw was found in the multicloud-operators-subscription component. (CVE-2026-66792)

Threats Tagged 'ghsa-8jj2-p7p7-6mr3'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ghsa-8jj2-p7p7-6mr3'

Lead Pen Test Professional