Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

clone-for-windows

Clone for Windows provided by ELECOM CO.,LTD.registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege.

CVE-2025-66271 is a security vulnerability identified in the Clone for Windows software developed by ELECOM CO.,LTD., affecting versions prior to 2.36. The issue arises from the registration of a Windows service with an unquoted file path. In Windows, unquoted service paths containing spaces can be exploited by placing malicious executables in specific locations along the search path, leading the system to execute these malicious files with the service's privileges. In this case, a user who has write permissions on the root directory of the system drive (typically C:\) can place a crafted executable that will be run with SYSTEM-level privileges when the service starts or restarts. This vulnerability is significant because SYSTEM privileges represent the highest level of access on a Windows system, allowing full control over the affected machine. The vulnerability requires that the attacker already has some level of write access to the system drive root, which is typically restricted but may be granted in misconfigured environments or through other privilege escalation techniques. The CVSS 3.0 base score of 6.7 reflects a medium severity, with attack vector local (AV:L), low attack complexity (AC:L), high privileges required (PR:H), no user interaction (UI:N), unchanged scope (S:U), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). No known exploits have been reported in the wild as of the publication date, but the vulnerability presents a clear risk if leveraged by an attacker. The lack of a patch link suggests that users should monitor ELECOM's official channels for updates or consider workarounds to mitigate risk until a patch is available.

Detailed information about CVE-2025-66271: Unquoted search path or element in ELECOM CO.,LTD. Clone for Windows affecting ELECOM CO.,LTD. Clone for Windows. Get

CVE-2025-66271: Unquoted search path or element in ELECOM CO.,LTD. Clone for Windows - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66271: Unquoted search path or element in ELECOM CO.,LTD. Clone for Windows

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional