IBM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only be available to privileged users.

CVE Database V5

Detailed information about CVE-2025-1112: CWE-282 Improper Ownership Management in IBM OpenPages with Watson affecting IBM OpenPages with Watson. Get real-time 

CVE-2025-1112: CWE-282 Improper Ownership Management in IBM OpenPages with Watson - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-1112: CWE-282 Improper Ownership Management in IBM OpenPages with Watson

A hardcoded credential vulnerability exists in a specific deployment pattern for Esri Portal for ArcGIS versions 11.4 and below that may allow a remote unauthenticated attacker to gain administrative access to the system.

Detailed information about CVE-2025-2538: CWE-798 Use of Hard-coded Credentials in Esri Portal for ArcGIS affecting Esri Portal for ArcGIS. Get real-time update

CVE-2025-2538: CWE-798 Use of Hard-coded Credentials in Esri Portal for ArcGIS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-2538: CWE-798 Use of Hard-coded Credentials in Esri Portal for ArcGIS

Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if default or weak credentials are present

Detailed information about CVE-2025-52364: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-52364: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-52364: n/a

Iranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliates

Source: https://securityaffairs.com/179754/malware/iranian-group-pay2key-i2p-ramps-up-ransomware-attacks-against-israel-and-us-with-incentives-for-affiliates.html

The Iranian threat actor group known as Pay2Key.I2P has escalated its ransomware campaign targeting organizations primarily in Israel and the United States. This group operates using an affiliate model, incentivizing third-party cybercriminals to deploy ransomware on their behalf, thereby increasing the scale and frequency of attacks. Pay2Key.I2P ransomware campaigns typically involve gaining unauthorized access to victim networks, encrypting critical data, and demanding ransom payments to restore access. The use of an affiliate program suggests a more distributed and potentially harder-to-track operation, as multiple actors can independently compromise targets under the Pay2Key.I2P umbrella. While specific technical details about the ransomware variants or exploitation methods are not provided, the group's activity is notable for its geopolitical targeting and the strategic choice of victims, focusing on Israeli and US entities. The lack of known exploits in the wild and minimal discussion on Reddit indicates that this threat is emerging but not yet widespread or fully analyzed in public forums. However, the medium severity rating reflects the potential disruption ransomware attacks can cause, including data loss, operational downtime, and financial extortion.

Reddit InfoSec News

Detailed information about Iranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliates. Get real-time updates, te

Iranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliates - Live Threat Intelligence - Threat Radar | OffSeq.com

Iranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliates

Reddit Discussion: Iranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliates

Ransomware Attack Stops Nova Scotia Power Meter Readings

Source: https://www.infosecurity-magazine.com/news/ransomware-nova-scotia-power-meter/

The reported security threat involves a ransomware attack that disrupted the meter reading operations of Nova Scotia Power, a utility company responsible for electricity distribution. Ransomware is a type of malware that encrypts data or systems and demands payment for restoration. In this incident, the ransomware attack specifically targeted the infrastructure responsible for collecting and processing meter readings, which are critical for accurate billing and grid management. Although detailed technical specifics such as the ransomware variant, infection vector, or exploited vulnerabilities are not provided, the impact on operational technology (OT) systems within a critical infrastructure sector is evident. The attack likely involved compromising IT or OT networks, potentially exploiting weak access controls or unpatched systems, to deploy ransomware payloads that halted meter data collection. This disruption can delay billing cycles, affect revenue streams, and impair grid monitoring and management functions. The attack was reported on a trusted cybersecurity news platform and discussed briefly on Reddit’s InfoSec community, indicating some level of public awareness but limited technical disclosure. No known exploits or patches are currently identified, suggesting the attack may be novel or under investigation. The ransomware’s ability to stop meter readings highlights the increasing risk of cyberattacks targeting utility companies’ operational systems, which are often interconnected with corporate IT environments and may have varying levels of cybersecurity maturity.

Detailed information about Ransomware Attack Stops Nova Scotia Power Meter Readings. Get real-time updates, technical details, and mitigation strategies.

Ransomware Attack Stops Nova Scotia Power Meter Readings - Live Threat Intelligence - Threat Radar | OffSeq.com

Ransomware Attack Stops Nova Scotia Power Meter Readings

Reddit Discussion: Ransomware Attack Stops Nova Scotia Power Meter Readings

Feds Seize BidenCash Carding Market and Its Crypto Profits

This content has been identified as promotional or non-threat material.

Detailed information about Feds Seize BidenCash Carding Market and Its Crypto Profits. Get real-time updates, technical details, and mitigation strategies.

Feds Seize BidenCash Carding Market and Its Crypto Profits

AI Analysis

Technical Summary

Potential Impact

Mitigation Recommendations

Feds Seize BidenCash Carding Market and Its Crypto Profits

Description

AI-Powered Analysis

Technical Analysis

Potential Impact

Mitigation Recommendations

Technical Details

Related Threats

Iranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliates

Ransomware Attack Stops Nova Scotia Power Meter Readings

Jack Dorsey Unveils Offline Messaging App ‘Bitchat’ with No Internet, Servers, or Accounts

Server with Rockerbox Tax Firm Data Exposed 286GB of PII Records

M&S confirms social engineering led to massive ransomware attack

Actions

External Links

Need enhanced features?

Latest Threats

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility