Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

unbound

NLnet Labs Unbound versions 1.18.0 through 1.25.1 have a vulnerability in the handling of DNS cookies when listening on a proxy-protocol-port interface with 'answer-cookie: yes'. The server cookie is computed over the proxy's wire address rather than the client address declared by PROXYv2, allowing a server cookie obtained via one proxy node to validate for all clients behind that node. This enables an off-path attacker to replay a harvested cookie with any spoofed source, bypassing DNS Cookie checks.

In NLnet Labs Unbound versions 1.18.0 up to and including 1.25.1, when configured to listen on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the server cookie as defined by RFC 9018 is incorrectly computed over the proxy's wire address instead of the PROXYv2-declared client address. This flaw means that a server cookie obtained through a given proxy node is valid for every client behind that proxy node. Consequently, on a UDP+proxy-protocol front, an off-path attacker can obtain one valid cookie with a legitimate query and then replay it using any spoofed source address, effectively bypassing DNS Cookie validation mechanisms designed to prevent such spoofing.

NLnet Labs Unbound versions 1.18.0 through 1.25.1 have a vulnerability in the handling of DNS cookies when listening on a proxy-protocol-port interface with 'answer-cookie: yes'. The server cookie is computed over the proxy's wire address rather than the client address declared by PROXYv2, allowing 

In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the… (CVE-2026-54478)

Threats Tagged 'ubuntu-cve-2026-54478'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ubuntu-cve-2026-54478'

Lead Pen Test Professional