Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

quartus-prime-standard

quartus-prime-lite

Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows (Nios II Command Shell modules), Altera Quartus Prime Lite on Windows (Nios II Command Shell modules) allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 19.1 through 24.1; Quartus Prime Lite: from 19.1 through 24.1.

CVE-2025-14625 is classified under CWE-427, indicating an Uncontrolled Search Path Element vulnerability in the Altera Quartus Prime Standard and Lite software suites on Windows platforms. The vulnerability specifically resides in the Nios II Command Shell modules, which are part of the FPGA development environment used for embedded system design. The issue arises because the software does not properly control or sanitize the search path used to locate executable modules or DLLs. An attacker with low-level privileges can exploit this by inserting malicious executables or libraries into directories that are searched before the legitimate ones, causing the software to load and execute attacker-controlled code. The vulnerability requires user interaction and has a high complexity for attack but can lead to significant compromise of the affected system's confidentiality, integrity, and availability. The affected versions span from 19.1 through 24.1 for both Quartus Prime Standard and Lite editions. Although no public exploits are known, the vulnerability's presence in widely used FPGA development tools poses a risk, especially in environments where these tools are used for critical embedded system development. The CVSS 4.0 vector indicates local attack vector, high attack complexity, partial privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability.

Detailed information about CVE-2025-14625: CWE-427 Uncontrolled Search Path Element in Altera Quartus Prime Standard affecting Altera Quartus Prime Standard. Ge

CVE-2025-14625: CWE-427 Uncontrolled Search Path Element in Altera Quartus Prime Standard - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14625: CWE-427 Uncontrolled Search Path Element in Altera Quartus Prime Standard

Insecure Temporary File vulnerability in Altera Quartus Prime Standard 

Installer (SFX)

 on Windows, Altera Quartus Prime Lite 

Installer (SFX)

 on Windows allows Explore for Predictable Temporary File Names.This issue affects Quartus Prime Standard: from 23.1 through 24.1; Quartus Prime Lite: from 23.1 through 24.1.

CVE-2025-14614 is a vulnerability classified under CWE-377 (Insecure Temporary File) found in the Altera Quartus Prime Standard and Lite installers (SFX) on Windows platforms, specifically versions from 23.1 through 24.1. The issue stems from the use of predictable temporary file names during the installation process, which can be explored and potentially manipulated by an attacker with local access. This vulnerability allows an attacker to interfere with the installation by replacing or tampering with temporary files, potentially leading to privilege escalation, code execution, or disruption of the installation process. The CVSS 4.0 vector indicates that the attack requires local access (AV:L), has high attack complexity (AC:H), requires privileges (PR:L), and user interaction (UI:A). The vulnerability impacts confidentiality, integrity, and availability at a high level, but the scope is limited to local systems without network exploitation. No patches are currently linked, and no known exploits have been reported in the wild. The vulnerability is particularly relevant for organizations relying on Quartus Prime for FPGA design and development, as compromised installations could lead to compromised development environments or supply chain risks.

Detailed information about CVE-2025-14614: CWE-377: Insecure Temporary File in Altera Quartus Prime Standard affecting Altera Quartus Prime Standard. Get real-t

CVE-2025-14614: CWE-377: Insecure Temporary File in Altera Quartus Prime Standard - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14614: CWE-377: Insecure Temporary File in Altera Quartus Prime Standard


CVE-2025-14625: CWE-427 Uncontrolled Search Path Element in Altera Quartus Prime StandardCVE-2025-14625 0 Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows (Nios II Command Shell modules), Altera Quartus Prime Lite on Windows (Nios II Command Shell modules) allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 19.1 through 24.1; Quartus Prime Lite: from 19.1 through 24.1. MediumVulnerabilityGermanyFranceUnited Kingdom+6#cve #cve-2025-14625 #cwe-427 Join the discussion	CVE Database V5	01/06/2026, 21:42:28 UTC Added: 01/06/2026, 21:59:34 UTC
CVE-2025-14614: CWE-377: Insecure Temporary File in Altera Quartus Prime StandardCVE-2025-14614 0 Insecure Temporary File vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite Installer (SFX) on Windows allows Explore for Predictable Temporary File Names.This issue affects Quartus Prime Standard: from 23.1 through 24.1; Quartus Prime Lite: from 23.1 through 24.1. MediumVulnerabilityGermanyFranceNetherlands+2#cve #cve-2025-14614 #cwe-377 Join the discussion	CVE Database V5	01/06/2026, 21:38:05 UTC Added: 01/06/2026, 21:59:34 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional