Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

xcode

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption.

CVE-2025-43505 is a vulnerability classified under CWE-787 (Out-of-bounds Write) affecting Apple Xcode, a widely used integrated development environment (IDE) for macOS and iOS application development. The vulnerability stems from improper input validation when processing certain file types, allowing an attacker to craft malicious files that trigger out-of-bounds writes to the heap memory. This heap corruption can lead to severe consequences including arbitrary code execution, privilege escalation, or denial of service through application crashes. The vulnerability does not require any privileges to exploit (AV:N/PR:N), but does require user interaction (UI:R), such as opening or importing the malicious file within Xcode. The scope is unchanged (S:U), meaning the impact is limited to the vulnerable component. Apple addressed this issue in Xcode version 26.1 by implementing improved input validation to prevent out-of-bounds memory writes. While no public exploits have been reported, the high CVSS score of 8.8 reflects the critical nature of the vulnerability, impacting confidentiality, integrity, and availability of the development environment and potentially the software produced. This vulnerability poses a significant risk to developers and organizations relying on Xcode for software creation and distribution, as exploitation could compromise the development pipeline or introduce malicious code into applications.

Detailed information about CVE-2025-43505: Processing a maliciously crafted file may lead to heap corruption in Apple Xcode affecting Apple Xcode. Get real-time

CVE-2025-43505: Processing a maliciously crafted file may lead to heap corruption in Apple Xcode - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-43505: Processing a maliciously crafted file may lead to heap corruption in Apple Xcode

The issue was addressed with improved checks. This issue is fixed in Xcode 16.3. A malicious app may be able to access private information.

CVE-2025-24226 is a vulnerability identified in Apple Xcode, the integrated development environment (IDE) used for developing software for Apple platforms. The issue stems from insufficient validation or checks within Xcode that allow a malicious application to access private information that should otherwise be protected. This vulnerability is classified under CWE-200, which relates to information exposure. The flaw does not require elevated privileges (PR:N) but does require user interaction (UI:R) and local access (AV:L), meaning an attacker must have local access to the system and trick the user into performing some action. The vulnerability affects confidentiality (C:H) but does not impact integrity or availability. Apple addressed this issue in Xcode version 16.3 by implementing improved checks to prevent unauthorized access to private data. No public exploits or active exploitation in the wild have been reported to date. The CVSS v3.1 base score is 5.5, indicating a medium severity level. This vulnerability primarily threatens developers and organizations using Xcode on macOS systems, as a malicious app running locally could leverage this flaw to extract sensitive information from the development environment.

Detailed information about CVE-2025-24226: A malicious app may be able to access private information in Apple Xcode affecting Apple Xcode. Get real-time updates

CVE-2025-24226: A malicious app may be able to access private information in Apple Xcode - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-24226: A malicious app may be able to access private information in Apple Xcode

A privacy issue was addressed by removing sensitive data. This issue is fixed in Xcode 16. An attacker may be able to determine the Apple ID of the owner of the computer.

CVE-2024-40862 is a vulnerability in Apple Xcode that allows an attacker to remotely obtain the Apple ID associated with the computer owner. This is a privacy issue categorized under CWE-200 (Exposure of Sensitive Information). The vulnerability does not require any authentication or user interaction and can be exploited over the network, making it relatively easy to leverage. The root cause involves the unintentional exposure of sensitive data within Xcode, which was addressed by Apple in Xcode 16 by removing the sensitive information from the affected components. The CVSS 3.1 base score of 7.5 reflects a high severity due to the high confidentiality impact, while integrity and availability remain unaffected. Although no exploits have been reported in the wild, the potential for privacy breaches is significant, especially for developers and organizations relying on Apple’s development environment. The exposure of an Apple ID can lead to further targeted attacks such as phishing, social engineering, or unauthorized access attempts to Apple services. This vulnerability highlights the importance of safeguarding developer tools and the sensitive data they may inadvertently expose.

Detailed information about CVE-2024-40862: An attacker may be able to determine the Apple ID of the owner of the computer in Apple Xcode affecting Apple Xcode. 

CVE-2024-40862: An attacker may be able to determine the Apple ID of the owner of the computer in Apple Xcode - Live Threat Intelligence - Threat Radar | OffSeq.com


CVE-2025-43505: Processing a maliciously crafted file may lead to heap corruption in Apple XcodeCVE-2025-43505 0 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption. HighVulnerabilityUnited StatesChinaJapan+7#cve #cve-2025-43505 Join the discussion	CVE Database V5	11/04/2025, 01:16:46 UTC Added: 11/04/2025, 01:49:41 UTC
CVE-2025-24226: A malicious app may be able to access private information in Apple XcodeCVE-2025-24226 0 The issue was addressed with improved checks. This issue is fixed in Xcode 16.3. A malicious app may be able to access private information. MediumVulnerabilityUnited StatesChinaJapan+7#cve #cve-2025-24226 Join the discussion	CVE Database V5	03/31/2025, 22:23:04 UTC Added: 11/03/2025, 21:40:18 UTC
CVE-2024-40862: An attacker may be able to determine the Apple ID of the owner of the computer in Apple XcodeCVE-2024-40862 0 A privacy issue was addressed by removing sensitive data. This issue is fixed in Xcode 16. An attacker may be able to determine the Apple ID of the owner of the computer. HighVulnerabilityUnited StatesChinaJapan+7#cve #cve-2024-40862 Join the discussion	CVE Database V5	09/16/2024, 23:23:05 UTC Added: 11/04/2025, 16:46:44 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional