Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Smallworld

Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue affects Smallworld: 5.3.3 and prior versions for Linux, and 5.3.4.and prior versions for Windows.

CVE-2025-3222 is an improper authentication vulnerability classified under CWE-287 affecting GE Vernova Smallworld, a geospatial and utility network management software widely deployed in critical infrastructure sectors. The flaw exists in versions 5.3.3 and earlier on Linux, and 5.3.4 and earlier on Windows platforms. This vulnerability allows an unauthenticated attacker to bypass authentication mechanisms entirely, granting unauthorized access to the system. The CVSS 4.0 base score of 9.3 reflects its critical severity, with attack vector being network-based (AV:N), no required privileges (PR:N), no user interaction (UI:N), and high impact on confidentiality, integrity, and availability (VC:H/VI:H/VA:H). The vulnerability does not require any user interaction or prior authentication, making it highly exploitable remotely. Although no known exploits are currently reported in the wild, the ease of exploitation combined with the critical nature of the software’s use in managing utility networks and infrastructure poses a significant risk. The vulnerability could allow attackers to manipulate or disrupt critical infrastructure data, potentially causing operational outages or data breaches. The lack of available patches at the time of publication necessitates immediate risk mitigation through compensating controls. This vulnerability highlights the importance of robust authentication mechanisms in critical infrastructure software and the need for timely patch management.

Detailed information about CVE-2025-3222: CWE-287 Improper Authentication in GE Vernova Smallworld affecting GE Vernova Smallworld. Get real-time updates, techn

CVE-2025-3222: CWE-287 Improper Authentication in GE Vernova Smallworld - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-3222: CWE-287 Improper Authentication in GE Vernova Smallworld

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional