Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

kdeconnect

kdeconnect-ios

kdeconnect-android

gnome-shell-extension-gsconnect

valent

The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49.

CVE-2025-66270 is a medium-severity authentication bypass vulnerability identified in the KDE Connect protocol, which facilitates seamless integration and communication between desktop and mobile devices. The root cause is the protocol's failure to correlate device IDs consistently across two separate packets during the authentication process. This flaw allows an attacker with network access to spoof device identities, effectively bypassing authentication controls. The affected versions include KDE Connect before 25.12 on desktop, versions before 0.5.4 on iOS, before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49. The vulnerability is classified under CWE-290 (Authentication Bypass by Spoofing). The CVSS v3.1 base score is 4.7, reflecting an attack vector requiring adjacent network access (AV:A), high attack complexity (AC:H), no privileges required (PR:N), and no user interaction (UI:N). The scope is changed (S:C), indicating that the vulnerability affects resources beyond the initially vulnerable component. The impact on confidentiality and integrity is low, with no impact on availability. No public exploits have been reported yet, but the vulnerability's presence in widely used KDE Connect implementations across multiple platforms makes it a relevant concern. The KDE project has not yet published official patches at the time of this report, so users should monitor for updates and apply them promptly once available.

Detailed information about CVE-2025-66270: CWE-290 Authentication Bypass by Spoofing in KDE KDE Connect protocol affecting KDE KDE Connect protocol. Get real-ti

CVE-2025-66270: CWE-290 Authentication Bypass by Spoofing in KDE KDE Connect protocol - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66270: CWE-290 Authentication Bypass by Spoofing in KDE KDE Connect protocol

gsconnect

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59.

CVE-2025-32898 identifies a cryptographic weakness in the KDE Connect verification-code protocol, specifically due to insufficient entropy in the verification codes used for device pairing. The protocol generates only 8-character verification codes, which significantly reduces the keyspace and makes brute-force attacks feasible. Attackers with network access can attempt to guess these codes to impersonate or pair unauthorized devices, potentially intercepting or manipulating data exchanged between devices. This vulnerability affects multiple platforms: KDE Connect on Android (before version 1.33.0), desktop (before 25.04), iOS (before 0.5), as well as related projects Valent and GSConnect. The CVSS v3.1 score is 4.7 (medium), reflecting that exploitation requires adjacent network access (AV:A), high attack complexity (AC:H), no privileges required (PR:N), and no user interaction (UI:N). The scope is changed (S:C), meaning the vulnerability can affect resources beyond the initially vulnerable component. The impact is limited to low confidentiality and integrity loss, with no availability impact. No patches were linked in the provided data, but fixed versions are known. No active exploitation has been reported, but the vulnerability poses a risk especially in environments relying on KDE Connect for secure device communication.

Detailed information about CVE-2025-32898: CWE-331 Insufficient Entropy in KDE KDE Connect verification-code protocol affecting KDE KDE Connect verification-cod

CVE-2025-32898: CWE-331 Insufficient Entropy in KDE KDE Connect verification-code protocol - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-32898: CWE-331 Insufficient Entropy in KDE KDE Connect verification-code protocol


CVE-2025-66270: CWE-290 Authentication Bypass by Spoofing in KDE KDE Connect protocolCVE-2025-66270 0 The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49. MediumVulnerabilityGermanyFranceUnited Kingdom+6#cve #cve-2025-66270 #cwe-290 Join the discussion	CVE Database V5	12/05/2025, 00:00:00 UTC Added: 12/05/2025, 05:45:25 UTC
CVE-2025-32898: CWE-331 Insufficient Entropy in KDE KDE Connect verification-code protocolCVE-2025-32898 0 The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59. MediumVulnerabilityGermanyFranceUnited Kingdom+6#cve #cve-2025-32898 #cwe-331 Join the discussion	CVE Database V5	12/05/2025, 00:00:00 UTC Added: 12/05/2025, 04:45:20 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional