Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

veepn

VeeVPN 1.6.1 contains an unquoted service path vulnerability in the VeePNService that allows remote attackers to execute code during startup or reboot with escalated privileges. Attackers can exploit this by providing a malicious service name, allowing them to inject commands and run as LocalSystem.

CVE-2025-66575 identifies a critical security vulnerability in VeePN's VeeVPN software version 1.6.1, specifically an unquoted search path or element vulnerability classified under CWE-428. The flaw exists in the VeePNService, a Windows service component, where the service executable path is not properly quoted. This misconfiguration allows attackers to insert malicious executables or commands into the service path. During system startup or reboot, Windows attempts to execute the service using the unquoted path, which can be hijacked if an attacker places a malicious binary or script in a directory that is parsed earlier in the search path. Exploiting this vulnerability enables remote attackers to execute arbitrary code with LocalSystem privileges, the highest level of access on a Windows system. The attack vector requires user interaction, such as triggering a reboot or startup sequence, but does not require prior authentication, increasing the risk profile. The CVSS 4.0 score of 8.5 reflects the high impact on confidentiality, integrity, and availability, combined with relatively low attack complexity. No patches are currently listed, and no known exploits have been observed in the wild, but the vulnerability presents a significant risk if weaponized. This vulnerability is particularly dangerous because it allows privilege escalation from a potentially low-privileged context to full system control, which can lead to persistent backdoors, data theft, or system sabotage.

Detailed information about CVE-2025-66575: CWE-428 Unquoted Search Path or Element in VeePN VeeVPN affecting VeePN VeeVPN. Get real-time updates, technical deta

CVE-2025-66575: CWE-428 Unquoted Search Path or Element in VeePN VeeVPN - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66575: CWE-428 Unquoted Search Path or Element in VeePN VeeVPN

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional