Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In RNP version 0.18.0 a refactoring regression causes the symmetric 
session key used for Public-Key Encrypted Session Key (PKESK) packets to
 be left uninitialized except for zeroing, resulting in it always being 
an all-zero byte array.

Any data encrypted using public-key encryption 
in this release can be decrypted trivially by supplying an all-zero 
session key, fully compromising confidentiality.

The vulnerability affects only public key encryption (PKESK packets).  Passphrase-based encryption (SKESK packets) is not affected.

Root cause: Vulnerable session key buffer used in PKESK packet generation.



The defect was introduced in commit `7bd9a8dc356aae756b40755be76d36205b6b161a` where initialization 
logic inside `encrypted_build_skesk()` only randomized the key for the 
SKESK path and omitted it for the PKESK path.

CVE-2025-13470 is a cryptographic vulnerability identified in Ribose RNP version 0.18.0, a widely used OpenPGP implementation. The issue stems from a refactoring regression introduced in commit 7bd9a8dc356aae756b40755be76d36205b6b161a, where the symmetric session key buffer used for Public-Key Encrypted Session Key (PKESK) packets was left uninitialized except for zeroing. Specifically, the initialization logic that randomized the session key was applied only to the passphrase-based encryption path (SKESK) but omitted for the PKESK path. As a result, the session key used in PKESK packets is always an all-zero byte array. This critical flaw allows any data encrypted using public-key encryption in RNP 0.18.0 to be decrypted trivially by an attacker who supplies the all-zero session key, completely breaking the confidentiality guarantees of the encryption. The vulnerability does not affect passphrase-based encryption (SKESK packets), limiting the scope to public-key encrypted data. The CVSS 4.0 score is 7.7 (high severity), reflecting the network attack vector, no required privileges or user interaction, and a high impact on confidentiality. No known exploits have been reported in the wild yet, but the vulnerability is straightforward to exploit given the static session key. This defect compromises the fundamental security of encrypted communications relying on RNP 0.18.0's public-key encryption, potentially exposing sensitive data to unauthorized parties.

Detailed information about CVE-2025-13470: CWE-330 Use of Insufficiently Random Values in Ribose RNP affecting Ribose RNP. Get real-time updates, technical deta

CVE-2025-13470: CWE-330 Use of Insufficiently Random Values in Ribose RNP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-13470: CWE-330 Use of Insufficiently Random Values in Ribose RNP

Ribose RNP before 0.16.3 may hang when the input is malformed.

CVE-2023-29479 identifies a vulnerability in Ribose RNP, an open-source implementation of the OpenPGP standard used for encryption and signing. Versions prior to 0.16.3 may hang or become unresponsive when processing malformed input data. This behavior corresponds to a denial-of-service (DoS) condition categorized under CWE-770 (Allocation of Resources Without Limits or Throttling). The vulnerability can be triggered remotely without authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). The impact is limited to availability, with no confidentiality or integrity compromise. The vulnerability arises due to insufficient input validation or resource management when handling malformed packets or messages, causing the software to enter a hung state. Ribose RNP is commonly integrated into cryptographic tools and libraries, meaning that any dependent applications could inherit this vulnerability. Although no known exploits have been reported in the wild, the medium CVSS score of 5.3 reflects the potential for service disruption. No explicit patches are linked in the provided data, but upgrading to version 0.16.3 or later is recommended to address the issue. This vulnerability highlights the importance of robust input validation and resource management in cryptographic software to prevent denial-of-service conditions.

Detailed information about CVE-2023-29479: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-29479: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-29479: n/a


CVE-2025-13470: CWE-330 Use of Insufficiently Random Values in Ribose RNPCVE-2025-13470 0 In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key (PKESK) packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using public-key encryption in this release can be decrypted trivially by supplying an all-zero session key, fully compromising confidentiality. The vulnerability affects only public key encryption (PKESK packets). Passphrase-based encryption (SKESK packets) is not affected. Root cause: Vulnerable session key buffer used in PKESK packet generation. The defect was introduced in commit `7bd9a8dc356aae756b40755be76d36205b6b161a` where initialization logic inside `encrypted_build_skesk()` only randomized the key for the SKESK path and omitted it for the PKESK path. HighVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2025-13470 #cwe-330 Join the discussion	CVE Database V5	11/21/2025, 17:05:15 UTC Added: 11/21/2025, 17:24:05 UTC
CVE-2023-29479: n/aCVE-2023-29479 0 Ribose RNP before 0.16.3 may hang when the input is malformed. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2023-29479 Join the discussion	CVE Database V5	04/24/2023, 00:00:00 UTC Added: 11/21/2025, 20:08:57 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional