Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
3 / 3 results
highbug_reportVulnerabilitybug_reportVulnerability
OpenSSL DTLS flaw leaks heap memory, crashes programs (CVE-2026-84782)
OpenSSL versions 4.0 (before 4.0.3), 3.6 (before 3.6.5), 3.5 (before 3.5.9), 3.4 (before 3.4.8), 3.0, 1.1.1, and 1.0.2. Only affects software using OpenSSL for DTLS connections (e.g., WebRTC, VoIP).
OpenSSL30 Sep · 06:09 UTC
highbug_reportVulnerabilitybug_reportVulnerability
OpenSSL "HollowByte" DoS allows 11-byte requests to freeze server memory
OpenSSL versions prior to June 2024 patch. Affects TLS servers running on glibc-based Linux systems. Specific vulnerable versions not disclosed; patch applied without CVE or public advisory.
OpenSSL17 Jul · 18:20 UTC
highbug_reportVulnerabilitybug_reportVulnerability
HollowByte flaw enables DoS on OpenSSL servers via 11-byte payload
OpenSSL servers (specific versions not disclosed). Unauthenticated remote attackers can exploit the vulnerability. Scope includes any internet-facing OpenSSL server implementations susceptible to the malicious payload.
OpenSSL17 Jul · 15:56 UTC