Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

cognos-analytics-mobile

IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 

is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.

CVE-2025-36057 is a medium severity vulnerability affecting IBM Cognos Analytics Mobile for iOS versions 1.1.0 through 1.1.22. The vulnerability stems from an authentication bypass issue categorized under CWE-299 (Authentication Bypass Using an Alternate Path or Channel). Specifically, the application improperly utilizes the Local Authentication Framework library, which is unnecessary since the app does not implement biometric authentication. This misuse creates an alternate authentication path that attackers can exploit to bypass normal authentication controls without requiring user interaction or prior privileges. The CVSS 3.1 base score is 5.2, reflecting a vulnerability that can be exploited remotely (AV:P - physical access required), with low attack complexity (AC:L), no privileges required (PR:N), and no user interaction needed (UI:N). The impact on confidentiality is low, but the integrity impact is high, as unauthorized users could potentially manipulate or alter sensitive analytics data or reports within the application. Availability is not affected. No known exploits are currently reported in the wild, and no patches have been linked yet. The vulnerability is specific to the iOS mobile client of IBM Cognos Analytics, a business intelligence and analytics platform widely used for data reporting and decision-making.

Detailed information about CVE-2025-36057: CWE-299 Authentication Bypass Using an Alternate Path or Channel in IBM Cognos Analytics Mobile affecting IBM Cognos 

CVE-2025-36057: CWE-299 Authentication Bypass Using an Alternate Path or Channel in IBM Cognos Analytics Mobile - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-36057: CWE-299 Authentication Bypass Using an Alternate Path or Channel in IBM Cognos Analytics Mobile

IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 

could be vulnerable to information exposure due to the use of unencrypted network traffic.

CVE-2025-36062 identifies a vulnerability in IBM Cognos Analytics Mobile for iOS versions 1.1.0 through 1.1.22, where sensitive data is transmitted over unencrypted network traffic. This vulnerability is classified under CWE-311, which refers to the missing encryption of sensitive data. The core issue is that the mobile application fails to properly secure data in transit, potentially exposing confidential information to interception by unauthorized parties. The vulnerability has a CVSS v3.1 base score of 5.9, indicating a medium severity level. The vector string (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) shows that the attack vector is network-based (remote), requires high attack complexity, no privileges, and no user interaction. The impact is primarily on confidentiality, with no effect on integrity or availability. Since the vulnerability affects the iOS mobile client, it could expose sensitive business intelligence data accessed via the IBM Cognos Analytics platform to network eavesdropping, especially on untrusted or public networks. No known exploits are currently reported in the wild, and no patches have been linked yet, indicating that remediation may still be pending or in development. The vulnerability could be exploited by attackers positioned on the same network as the victim (e.g., public Wi-Fi or compromised internal networks) to intercept sensitive analytics data, potentially leading to information disclosure of business-critical insights or personally identifiable information embedded in reports or dashboards.

Detailed information about CVE-2025-36062: CWE-311 Missing Encryption of Sensitive Data in IBM Cognos Analytics Mobile affecting IBM Cognos Analytics Mobile. Ge

CVE-2025-36062: CWE-311 Missing Encryption of Sensitive Data in IBM Cognos Analytics Mobile - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-36062: CWE-311 Missing Encryption of Sensitive Data in IBM Cognos Analytics Mobile


CVE-2025-36057: CWE-299 Authentication Bypass Using an Alternate Path or Channel in IBM Cognos Analytics MobileCVE-2025-36057 0 IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-36057 #cwe-299 Join the discussion	CVE Database V5	07/21/2025, 18:10:32 UTC Added: 07/21/2025, 18:31:19 UTC
CVE-2025-36062: CWE-311 Missing Encryption of Sensitive Data in IBM Cognos Analytics MobileCVE-2025-36062 0 IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could be vulnerable to information exposure due to the use of unencrypted network traffic. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-36062 #cwe-311 Join the discussion	CVE Database V5	07/21/2025, 18:09:18 UTC Added: 07/21/2025, 18:31:19 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional