Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

erlang

A vulnerability in Erlang/OTP's ASN.1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause a denial of service by sending a specially crafted OID during the TLS handshake. The issue arises from inefficient algorithmic complexity in decoding large OBJECT IDENTIFIER subidentifiers, leading to excessive CPU consumption. This affects Erlang/OTP versions from 17.0 up to but not including 27.3.4.18, 28.5.0.7, and 29.1.1, corresponding to affected asn1 library versions. The vulnerability impacts any Erlang service parsing peer TLS certificates, including TLS clients and mutual-TLS servers. No known exploits are reported in the wild. Patch status is not explicitly confirmed in the provided data.

The Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder contains an inefficient algorithmic complexity flaw in the BER, PER, and JER decoding routines for OBJECT IDENTIFIER subidentifiers. Specifically, the decoder accumulates base-128 subidentifiers into an unbounded integer using a process with quadratic time complexity relative to the size of the subidentifier. This allows an attacker to craft a DER-encoded OBJECT IDENTIFIER with a very large arc (approximately 262 KB of continuation bytes), causing the decoder to consume excessive CPU time (about 13 seconds on typical hardware) during TLS handshake certificate parsing. The vulnerable code is present in OTP versions from 17.0 before 27.3.4.18, 28.5.0.7, and 29.1.1, affecting the asn1 library versions 3.0 before 5.3.4.3, 5.4.3.1, and 5.5.2. The vulnerability is exploitable remotely without authentication and affects services that parse peer TLS certificates before signature or trust chain verification.

Detailed information about Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause

Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of… (CVE-2026-65634) - Live Threat Intelligence - Threat Radar | OffSeq.com

Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of… (CVE-2026-65634)

Threats Tagged 'ubuntu-cve-2026-65634'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ubuntu-cve-2026-65634'

Lead Pen Test Professional