Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

aistore

NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering.

CVE-2025-33186 identifies a critical security vulnerability in the authentication (AuthN) component of NVIDIA AIStore, a storage solution designed for AI workloads. The root cause is the presence of hard-coded credentials within the AuthN module, classified under CWE-798. Hard-coded credentials are embedded static usernames or passwords that cannot be changed by users, making them a prime target for attackers. This vulnerability allows an unauthenticated attacker to exploit the hard-coded credentials, potentially after some user interaction, to gain unauthorized access. Once exploited, attackers can escalate privileges, access sensitive information, and tamper with data stored or managed by AIStore. The vulnerability affects all versions prior to 3.31, and while no public exploits are known yet, the ease of exploitation combined with the high impact on confidentiality, integrity, and availability results in a CVSS v3.1 score of 8.8 (high severity). The attack vector is network-based with low attack complexity, no privileges required, but user interaction is necessary, indicating that phishing or social engineering could be involved. The vulnerability’s scope is unchanged, meaning the exploit affects only the vulnerable component without extending beyond it. This flaw is particularly concerning for organizations relying on NVIDIA AIStore for AI data storage and processing, as it undermines the security of critical AI infrastructure.

Detailed information about CVE-2025-33186: CWE-798 Use of Hard-coded Credentials in NVIDIA AuthN component of NVIDIA AIStore affecting NVIDIA AuthN component of

CVE-2025-33186: CWE-798 Use of Hard-coded Credentials in NVIDIA AuthN component of NVIDIA AIStore - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-33186: CWE-798 Use of Hard-coded Credentials in NVIDIA AuthN component of NVIDIA AIStore

NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure.  A successful exploit of this vulnerability may lead to information disclosure.

CVE-2025-33185 identifies a vulnerability in the authentication (AuthN) component of NVIDIA AIStore, a scalable AI data storage solution. The weakness is classified under CWE-862, indicating missing authorization checks that allow unauthenticated users to access information they should not be able to see. Specifically, this flaw permits an attacker to cause information disclosure without requiring any authentication or user interaction, exploiting the system remotely over the network. The vulnerability affects all versions of NVIDIA AIStore prior to 3.31. The CVSS v3.1 score is 5.3 (medium), reflecting that the attack vector is network-based (AV:N), with low attack complexity (AC:L), no privileges required (PR:N), and no user interaction needed (UI:N). The impact is limited to confidentiality (C:L), with no effect on integrity or availability. Although no known exploits have been reported in the wild, the vulnerability poses a risk to organizations deploying NVIDIA AIStore for AI data management, as sensitive information could be exposed to unauthorized parties. The absence of a patch link suggests that remediation involves upgrading to version 3.31 or later once available. The vulnerability highlights the importance of proper authorization checks in authentication components, especially in AI infrastructure where data sensitivity is high.

Detailed information about CVE-2025-33185: CWE-862 Missing Authorization in NVIDIA AuthN component of NVIDIA AIStore affecting NVIDIA AuthN component of NVIDIA 

CVE-2025-33185: CWE-862 Missing Authorization in NVIDIA AuthN component of NVIDIA AIStore - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-33185: CWE-862 Missing Authorization in NVIDIA AuthN component of NVIDIA AIStore


CVE-2025-33186: CWE-798 Use of Hard-coded Credentials in NVIDIA AuthN component of NVIDIA AIStoreCVE-2025-33186 0 NVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering. HighVulnerabilityGermanyFranceNetherlands+4#cve #cve-2025-33186 #cwe-798 Join the discussion	CVE Database V5	11/11/2025, 16:20:14 UTC Added: 11/11/2025, 16:36:57 UTC
CVE-2025-33185: CWE-862 Missing Authorization in NVIDIA AuthN component of NVIDIA AIStoreCVE-2025-33185 0 NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure. A successful exploit of this vulnerability may lead to information disclosure. MediumVulnerabilityGermanyFranceNetherlands+3#cve #cve-2025-33185 #cwe-862 Join the discussion	CVE Database V5	11/11/2025, 16:19:46 UTC Added: 11/11/2025, 16:36:57 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional